EUVD-2026-50502

MCP Ruby SDK: Unbounded JSON-RPC request body causes uncontrolled memory allocation in StreamableHTTPTransport...

CVE-2026-28814

creationtimestamp| type| source ---|---|--- 2026-07-30 14:31:10+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/bikbl5vic3fxe...

CVE-2026-28813

creationtimestamp| type| source ---|---|--- 2026-07-30 14:25:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/dmiispwlcnpj3...

CVE-2026-16970

creationtimestamp| type| source ---|---|--- 2026-07-30 14:19:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/4xvtuild26bs4...

CVE-2026-17544

creationtimestamp| type| source ---|---|--- 2026-07-30 12:17:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2ojh2ibweiexi 2026-07-31 12:40:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrwxyq3z2x23 2026-07-31 23:06:04+00:00| seen|...

CVE-2026-44617

creationtimestamp| type| source ---|---|--- 2026-07-30 11:41:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/75oarfgstqb3k 2026-07-30 16:07:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7klaecmshahea...

GHSA-XR9X-R78C-5HRM

creationtimestamp| type| source ---|---|--- 2026-07-30 11:36:36+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mrudy2kgin2f 2026-07-30 13:34:04+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mrukk3nzjy2o 2026-07-30 14:46:38+00:00| seen|...

CVE-2026-18363

creationtimestamp| type| source ---|---|--- 2026-07-30 11:24:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrudbnnaaf2y 2026-07-30 12:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrufcr4hqa24...

CVE-2026-58162

creationtimestamp| type| source ---|---|--- 2026-07-30 09:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mru4dv7t3l2r 2026-07-30 17:48:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mruyqcqzen2i 2026-08-05 23:37:09+00:00| seen|...

CVE-2026-44101

creationtimestamp| type| source ---|---|--- 2026-07-30 07:58:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrtxrdmjwf2e...

CVE-2026-58046

creationtimestamp| type| source ---|---|--- 2026-07-30 07:00:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrtujl5bc42j 2026-07-30 07:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtukscvpt22 2026-07-30 07:08:22+00:00| seen|...

CVE-2026-14923

The Sync Post With Other Site WordPress plugin before 1.9.3 does not correctly enforce the page-editing capability on a REST route that creates and updates posts, because of an operator-precedence flaw in its authorization check. An authenticated user holding only the post-editing capability such...

CVE-2026-14305

The WP Delicious WordPress plugin before 1.10.2 does not perform an authorization check on one of its AJAX actions, allowing unauthenticated users to modify limited post metadata a like counter and an associated identifier list on arbitrary posts, including inflating the counter and growing the...

CVE-2026-14231

The LifterLMS WordPress plugin before 10.0.10 does not perform a capability check in one of its select2 query AJAX handlers, only verifying that the user is logged in, allowing any authenticated user with subscriber-level access to read the titles of internal post types such as coupon codes by...

CVE-2026-14305 WP Delicious < 1.10.2 - Unauthenticated Arbitrary Post Meta Update via recipe_likes

The WP Delicious WordPress plugin before 1.10.2 does not perform an authorization check on one of its AJAX actions, allowing unauthenticated users to modify limited post metadata a like counter and an associated identifier list on arbitrary posts, including inflating the counter and growing the...

EUVD-2026-51015

The WP Delicious WordPress plugin before 1.10.2 does not perform an authorization check on one of its AJAX actions, allowing unauthenticated users to modify limited post metadata a like counter and an associated identifier list on arbitrary posts, including inflating the counter and growing the...

CVE-2026-14305

CVE-2026-14305 affects the WP Delicious WordPress plugin (before 1.10.2). The root cause is missing authorization for a specific AJAX action, permitting unauthenticated users to modify limited post metadata (a like counter and an associated identifier list) on arbitrary posts. This can inflate th...

CVE-2026-14231 LifterLMS < 10.0.10 - Subscriber+ Sensitive Information Disclosure via select2_query_posts

The LifterLMS WordPress plugin before 10.0.10 does not perform a capability check in one of its select2 query AJAX handlers, only verifying that the user is logged in, allowing any authenticated user with subscriber-level access to read the titles of internal post types such as coupon codes by...

CVE-2026-14231

The CVE refers to the LifterLMS WordPress plugin prior to version 10.0.10, where one of the select2 query AJAX handlers does not perform a proper capability check beyond ensuring the user is logged in. This allows any authenticated user with subscriber-level access to read titles of internal post...

EUVD-2026-50994

The LifterLMS WordPress plugin before 10.0.10 does not perform a capability check in one of its select2 query AJAX handlers, only verifying that the user is logged in, allowing any authenticated user with subscriber-level access to read the titles of internal post types such as coupon codes by...