PT-2026-49379

Contributor PHP Object Injection in Post Duplicator = 3.0.10 versions...

PT-2026-49327

Name of the Vulnerable Software and Affected Versions Project Firefly III version 6.5.9 Description Incorrect access control in the webhook management component allows attackers to scan internal resources by sending a crafted POST request. Recommendations At the moment, there is no information...

CVE-2026-50882

An issue in the /api/v0/pastes endpoint of anna-is-cute paste v0.1.1 allows attackers to cause a Denial of Service DoS via a crafted POST request...

PT-2026-49563

Name of the Vulnerable Software and Affected Versions @angular/service-worker versions prior to 19.2.23 @angular/service-worker versions prior to 20.3.22 @angular/service-worker versions prior to 21.2.15 @angular/service-worker versions prior to 22.0.0-rc.2 Description An issue in the...

PT-2026-49320

An issue in the uploadPostHandler component of Andrei Marcu linx-server v2.3.8 allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2026-50886

Incorrect access control in the webhook management component of Project Firefly III v6.5.9 allows attackers to scan internal resources via a crafted POST request...

PT-2026-49323

Name of the Vulnerable Software and Affected Versions anna-is-cute paste version 0.1.1 Description A flaw in the '/api/v0/pastes' endpoint allows attackers to cause a Denial of Service DoS, which is a condition where a service becomes unavailable to its intended users, by sending a specially...

PT-2026-49475

Unauthenticated Cross Site Scripting XSS in Post SMTP = 3.6.2 versions...

PT-2026-49578

Name of the Vulnerable Software and Affected Versions React Router version 7 Description Insufficient Cross-Site Request Forgery CSRF checks in Framework Mode allow bypasses when using 'PUT', 'PATCH', or 'DELETE' requests, as the checks were primarily applied to 'POST' requests. CSRF is a type of...

CVE-2026-50879

The vulnerability CVE-2026-50879 affects Andrei Marcu linx-server v2.3.8, specifically the uploadPostHandler component. A crafted POST request can trigger a Denial of Service (DoS). The connected sources confirm the issue but do not provide exploit details or a remediation patch/version. There is...

CVE-2026-50879

An issue in the uploadPostHandler component of Andrei Marcu linx-server v2.3.8 allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2026-53474

creationtimestamp| type| source ---|---|--- 2026-06-14 23:16:06+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mobvmivqxy2m 2026-06-15 16:32:00+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3modpia5svc2b 2026-06-16 16:37:05+00:00| seen|...

CVE-2026-41005

creationtimestamp| type| source ---|---|--- 2026-06-14 17:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moban2bf3u2c...

CVE-2026-53807

creationtimestamp| type| source ---|---|--- 2026-06-14 17:00:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mobamt2x672p...

CVE-2026-49083

creationtimestamp| type| source ---|---|--- 2026-06-14 15:16:17+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mob2sgujkz2q 2026-06-16 06:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mof4p56r3k2n 2026-07-13 22:00:24+00:00| seen|...

CVE-2026-49079

creationtimestamp| type| source ---|---|--- 2026-06-14 14:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3moaxgwzv452w 2026-06-17 14:03:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moii5uqqom2j 2026-07-13 22:00:24+00:00| seen|...

CVE-2026-44894

creationtimestamp| type| source ---|---|--- 2026-06-14 11:00:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moamj2elo72y...

CVE-2026-44893

creationtimestamp| type| source ---|---|--- 2026-06-14 11:00:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moamitgm242d...

CVE-2026-45674

creationtimestamp| type| source ---|---|--- 2026-06-14 10:02:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moaj5jy7g32v 2026-06-15 03:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3moce77eius2t 2026-06-15 16:32:32+00:00| seen|...

CVE-2026-47137

creationtimestamp| type| source ---|---|--- 2026-06-14 08:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moachcwmfn2c 2026-07-09 07:52:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq75n7h44f2r...