CVE-2026-18277 Missing Authorization in eScriptorium

Missing authorization in the OcrModelRight create and delete views in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to grant themselves access to another user's private OCR model and to revoke any user's OCR model access via a POST request, because the ownership check is...

CVE-2026-10535

creationtimestamp| type| source ---|---|--- 2026-08-06 15:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msgcyvmwba2n...

CVE-2026-12605

creationtimestamp| type| source ---|---|--- 2026-08-06 14:42:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgbm65koi2i 2026-08-11 03:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msrn426pqz2u...

CVE-2026-5116

creationtimestamp| type| source ---|---|--- 2026-08-06 14:15:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msga3ycwr326...

CVE-2026-67873

creationtimestamp| type| source ---|---|--- 2026-08-06 13:32:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msg5ozhrsh2l 2026-08-07 23:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msjovqihua2o 2026-08-08 00:48:57+00:00| seen|...

CVE-2026-52466

creationtimestamp| type| source ---|---|--- 2026-08-06 13:32:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msg5oy5zy22s...

CVE-2026-0516

creationtimestamp| type| source ---|---|--- 2026-08-06 13:10:26+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4ibyz3425...

CVE-2026-61545

creationtimestamp| type| source ---|---|--- 2026-08-06 13:10:21+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4i4smu425...

CVE-2026-16100

creationtimestamp| type| source ---|---|--- 2026-08-06 13:10:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4hotxsw2a...

CVE-2026-15572

creationtimestamp| type| source ---|---|--- 2026-08-06 13:10:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4hotxsw2a 2026-08-11 03:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msrorot2pu2b...

CVE-2026-16442

creationtimestamp| type| source ---|---|--- 2026-08-06 13:10:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4hotxsw2a 2026-08-26 00:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtx3uwafus2p 2026-08-26 01:25:13+00:00| seen|...

Malicious code in @activepieces/piece-google-contacts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e200ba4f9d11d42636dbbd1fa698843321af8b0bd23ff63493c0ce94891a5cb src/index.js imports childprocess and issues POST requests alongside a ping command invocation lines 25, 38, 49. The co-occurrence of childprocess...

Malicious code in @activepieces/piece-google-forms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d347d6252c2a1bb21b4318c0a319be36d60a95b4146d91108cee13d52c5759 The published tarball for @activepieces/piece-google-forms 0.5.7 contains src/index.js which imports childprocess, invokes ping-style OS command...

CVE-2026-19035

creationtimestamp| type| source ---|---|--- 2026-08-06 12:46:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5zzhrkd3qttpp...

CVE-2026-20288

creationtimestamp| type| source ---|---|--- 2026-08-06 12:45:09+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-29 2026-08-06 13:10:12+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4htwlvh2m...

CVE-2026-5158

The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'inputPlaceHolder' parameter in all versions up to, and including, 5.0.13 due to insufficient input sanitization and output escaping. This makes it...

CVE-2026-18654

creationtimestamp| type| source ---|---|--- 2026-08-06 12:15:19+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3msfzfpk5xb2k...

CVE-2026-7693

creationtimestamp| type| source ---|---|--- 2026-08-06 12:15:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msfzfep7552j...

CVE-2026-70556

Hubzilla versions prior to 11.4 contains a cross-site request forgery vulnerability in the OAuth2 /authorize endpoint handled by Zotlabs\Module\Authorize::post that allows unauthenticated attackers to register arbitrary OAuth2 applications under an authenticated user's account by submitting a...

CVE-2026-18649

creationtimestamp| type| source ---|---|--- 2026-08-06 12:02:08+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3msfyo4ynu22q 2026-08-06 12:02:50+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117048457828808782 2026-08-07 10:12:54+00:00|...