CVE-2026-18616

creationtimestamp| type| source ---|---|--- 2026-08-03 20:42:57+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3ms7eeoxtlk2l 2026-08-04 16:00:45+00:00| seen|...

CVE-2026-18615

creationtimestamp| type| source ---|---|--- 2026-08-03 18:56:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms76fkoadk22...

CVE-2026-69153

creationtimestamp| type| source ---|---|--- 2026-08-03 18:28:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gp5oyt6frvyqh 2026-08-03 18:31:17+00:00| seen| https://gist.github.com/alon710/cea21195fa5b2fd7a130b5ccd15ff053 2026-08-03 18:35:03+00:00| published-proof-of-concept|...

CVE-2026-15930

creationtimestamp| type| source ---|---|--- 2026-08-03 17:54:11+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms72wqlg2t2h...

CVE-2026-16534

creationtimestamp| type| source ---|---|--- 2026-08-03 17:52:19+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms72t5qgvk2l...

CVE-2026-16532

creationtimestamp| type| source ---|---|--- 2026-08-03 17:52:18+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms72t4dfzy23...

CVE-2026-41453

creationtimestamp| type| source ---|---|--- 2026-08-03 17:50:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7iwzrmzosnkxj 2026-08-04 06:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msadq2mz572l...

EUVD-2026-52339

Krayin CRM 2.2.4 contains a missing authentication vulnerability in the installer middleware that allows unauthenticated remote attackers to overwrite the primary administrator account by sending a crafted HTTP POST request with the X-Requested-With: XMLHttpRequest header to bypass the CanInstall...

CVE-2026-68586

creationtimestamp| type| source ---|---|--- 2026-08-03 14:56:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms6qyhkwq72o...

CVE-2026-68584

creationtimestamp| type| source ---|---|--- 2026-08-03 14:56:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms6qyg64yp2u...

CVE-2026-64827

creationtimestamp| type| source ---|---|--- 2026-08-03 14:16:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/355ijrasd4dlj...

CVE-2026-18089

Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass by verifying responses against the response-embedded certificate in verifyxml when no trust anchor is configured. verifyxml in Net::SAML2::Role::VerifyXML runs "return if !$anchors && !$cacert;" as soon as the XML::Sig chec...

CVE-2026-8793

creationtimestamp| type| source ---|---|--- 2026-08-03 12:50:18+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3ms6jxjcufv2l...

CVE-2026-33591

creationtimestamp| type| source ---|---|--- 2026-08-03 12:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/117031464187150211 2026-08-03 12:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3ms6h6fbd2l2i 2026-08-05 13:00:07+00:00| seen|...

CVE-2026-69082

CTI-Transmute contained a cross-site request forgery vulnerability in the administrative user deletion functionality. The /account/delete/ endpoint accepted HTTP GET requests for an operation that modified application state. An unauthenticated remote attacker could construct a malicious link or...

CVE-2026-17583

creationtimestamp| type| source ---|---|--- 2026-08-03 10:00:38+00:00| seen| https://thehackernews.com/2026/08/thermo-fisher-patches-flaw-that-could.html 2026-08-03 10:01:31+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3ms6ajowixy2u 2026-08-03 11:17:27+00:00|...

EUVD-2026-52257

CTI-Transmute contained a cross-site request forgery vulnerability in the administrative user deletion functionality. The /account/delete/ endpoint accepted HTTP GET requests for an operation that modified application state. An unauthenticated remote attacker could construct a malicious link or...

CVE-2026-69082 Cross-Site Request Forgery in the Administrative User Deletion Endpoint

CTI-Transmute contained a cross-site request forgery vulnerability in the administrative user deletion functionality. The /account/delete/ endpoint accepted HTTP GET requests for an operation that modified application state. An unauthenticated remote attacker could construct a malicious link or...

CVE-2026-69082

CTI-Transmute exposes a CSRF vulnerability in the admin user-deletion endpoint: /account/delete/ accepts HTTP GET, allowing an attacker to induce an authenticated admin to delete a user via a forged request. Exploitation requires an active admin session but no CTI-Transmute account or admin privi...

CVE-2026-16274

The Classified Listing WordPress plugin before 5.4.4 does not perform a capability or ownership check on an AJAX action that returns a post's content, allowing users with contributor-level access and above to read the content of any post, page, or custom post type on the site — including drafts,...