CVE-2026-59207

creationtimestamp| type| source ---|---|--- 2026-07-09 16:10:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7zibfybn25...

CVE-2026-59208

creationtimestamp| type| source ---|---|--- 2026-07-09 16:03:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7z3sn6kq2i 2026-07-15 15:22:07+00:00| seen| https://bsky.app/profile/hn100.bsky.social/post/3mqozlgli3q2t 2026-07-15 15:27:26+00:00| seen|...

CVE-2025-53828

creationtimestamp| type| source ---|---|--- 2026-07-06 16:22:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyiqllwq72d...

EUVD-2026-41717

A vulnerability has been found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. Affected by this issue is the function cancelorder of the file classes/Master.php of the component POST Parameter Handler. The manipulation of the argument ID leads to sql injection. It is possible...

CVE-2026-8924

creationtimestamp| type| source ---|---|--- 2026-07-03 21:36:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprivwaz5n23 2026-09-14 11:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvhxwx34cu2r...

CVE-2026-12166

creationtimestamp| type| source ---|---|--- 2026-07-03 10:24:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqdez7upd2n...

CVE-2026-13759

creationtimestamp| type| source ---|---|--- 2026-07-02 01:36:23+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmveyqzl52u...

CVE-2026-13827

creationtimestamp| type| source ---|---|--- 2026-07-02 01:10:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmtwxtuhj2y 2026-07-02 07:20:03+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702...

CVE-2026-13603

creationtimestamp| type| source ---|---|--- 2026-07-01 22:27:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmksvl2xj2q 2026-07-03 11:58:35+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqimivyih2i...

CVE-2026-13939

creationtimestamp| type| source ---|---|--- 2026-07-01 21:05:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmgbba7652o 2026-07-02 07:46:37+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702...

EUVD-2026-40890

The Kadence Blocks – Gutenberg Blocks for Page Builder Features plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to and including 3.7.7. This is due to a mismatch between the object used for authorization and the object actually accessed in the...

CVE-2026-12904

The Kadence Blocks – Gutenberg Blocks for Page Builder Features plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to and including 3.7.7. This is due to a mismatch between the object used for authorization and the object actually accessed in the...

CVE-2026-13548

creationtimestamp| type| source ---|---|--- 2026-06-29 11:35:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgfi26vz72d...

CVE-2025-71334

creationtimestamp| type| source ---|---|--- 2026-06-26 02:12:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5ulem5oj2x 2026-07-01 23:37:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmopslqvg2o 2026-07-02 05:37:06+00:00| seen|...

CVE-2026-12937

The Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin plugin for WordPress is vulnerable to generic SQL Injection via the 'postid' parameter in all versions up to, and including, 2.22.7 due to insufficient escaping on the user supplied parameter and lack of sufficie...

CVE-2026-12937

CVE-2026-12937 concerns the Tourfic WordPress plugin (versions ≤ 2.22.7). The issue is a generic SQL Injection via the post_id parameter caused by insufficient escaping and lack of prepared statements in the vulnerable SQL path. The vulnerability is exploitable by unauthenticated users, who can a...

CVE-2021-32988

creationtimestamp| type| source ---|---|--- 2026-06-24 13:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mozyaqqr3u2k...

CVE-2026-56340

creationtimestamp| type| source ---|---|--- 2026-06-21 02:57:03+00:00| seen| https://bsky.app/profile/suriq.io/post/3morer3vst42y 2026-07-10 14:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqcd2qlg7p2g...

CVE-2026-53807

creationtimestamp| type| source ---|---|--- 2026-06-14 17:00:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mobamt2x672p...

CVE-2026-10715 Camaleon CMS 2.9.2 - Improper authorization in draft autosave endpoint

Camaleon CMS 2.9.2 contains an improper authorization vulnerability in the administrator draft autosave endpoint. A low-privileged authenticated user can send an arbitrary postid to POST /admin/posttype//drafts and overwrite the draft associated with another user's post...