CVE-2026-14739

creationtimestamp| type| source ---|---|--- 2026-07-08 00:34:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3uqppnkw2i 2026-07-08 14:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq5ccbcr3u2b 2026-07-09 09:42:04+00:00| seen|...

CVE-2026-49033

creationtimestamp| type| source ---|---|--- 2026-07-08 00:22:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3tzxvs5x2q...

CVE-2020-14412

creationtimestamp| type| source ---|---|--- 2026-07-08 00:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq3t6uosqs2d...

CVE-2026-31309

Improper authorization in the /tequilapi/config/user endpoint of Mysterium Node from v1.21.1-rc0 before v1.36.0 allows an unauthenticated attacker to arbitrarily overwrite the node's configuration and achieve a full node takeover via a crafted POST request...

CVE-2026-58583

creationtimestamp| type| source ---|---|--- 2026-07-07 23:35:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3rfwfy5v2t...

CVE-2026-57172

creationtimestamp| type| source ---|---|--- 2026-07-07 23:29:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3r323sfn2i...

CVE-2026-53511

creationtimestamp| type| source ---|---|--- 2026-07-07 23:25:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3quv37dx2k 2026-07-11 00:39:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdggb7dsr2a...

Why Unity Remains the Most Popular Engine for Mobile Games

Learn why Unity is still a trusted engine for mobile games, from faster prototyping and Android and iOS support to tools that help studios scale after releases...

CVE-2020-27848

creationtimestamp| type| source ---|---|--- 2026-07-07 22:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq3micjbso2o...

CVE-2026-46354

creationtimestamp| type| source ---|---|--- 2026-07-07 21:44:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq3l74tvwf2v 2026-07-08 00:17:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3tqzha2n2l 2026-07-09 07:07:08+00:00| seen|...

CVE-2026-48955

creationtimestamp| type| source ---|---|--- 2026-07-07 21:30:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3kgwhhbm2k 2026-07-08 14:15:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mq5claiknt2n...

@better-auth/sso provider registration has server-side request forgery via unvalidated OIDC endpoints

Am I affected? Users are affected if all of the following are true: - Their application uses @better-auth/sso at a version = 0.1.0, 1.6.11 on the stable line, or any 1.7.0-beta.x on the pre-release line. - The sso plugin is added to their application's betterAuth plugins: ... array. - Any user wi...

CVE-2026-48956

creationtimestamp| type| source ---|---|--- 2026-07-07 20:48:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3i3hz3pq27 2026-07-08 14:15:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mq5claiknt2n...

CVE-2026-50530 DataEase: Token with Overly Broad Privileges in Share Mode: Access to Unshared Datasets

DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, a share mode chart data interface only validates that sceneId matches the resourceId in the link token and fails to validate whether tableId and field IDs in the request body belong to the shared resource, allowing...

CVE-2026-59707

LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint that allows attackers to fetch arbitrary internal URLs. The endpoint passes unsanitized gallery URL fields directly to gallery.GetGalleryConfigFromURLWithContext without proper...

CVE-2026-59707

CVE-2026-59707 : LocalAI exposes an unauthenticated SSRF via POST /models/apply. The endpoint forwards unsanitized gallery URL fields to gallery.GetGalleryConfigFromURLWithContext, allowing requests to internal/private/loopback URLs and leaking partial responses in error messages. No exploitation...

CVE-2026-59707 LocalAI - Server-Side Request Forgery via POST /models/apply

LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint that allows attackers to fetch arbitrary internal URLs. The endpoint passes unsanitized gallery URL fields directly to gallery.GetGalleryConfigFromURLWithContext without proper...

CVE-2026-48947

creationtimestamp| type| source ---|---|--- 2026-07-07 20:37:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3hi2txei2i 2026-07-08 14:15:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mq5claiknt2n...

CVE-2026-23697

creationtimestamp| type| source ---|---|--- 2026-07-07 19:58:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3fcys7xx2w 2026-07-10 17:49:13+00:00| seen| https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mqcphwfowu2j 2026-07-13 22:00:10+00:00| seen|...

CVE-2026-23698

creationtimestamp| type| source ---|---|--- 2026-07-07 19:53:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3f22eb4o2u 2026-07-13 22:00:10+00:00| seen| https://t.me/GithubRedTeam/92380 2026-07-14 00:00:18+00:00| seen| https://t.me/GithubRedTeam/92380 2026-07-15 00:00:31+00:00|...