CVE-2026-48368

creationtimestamp| type| source ---|---|--- 2026-07-15 14:46:46+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqoxmbo6ad2z...

CVE-2026-54058

creationtimestamp| type| source ---|---|--- 2026-07-15 14:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqoxacvh3y2j 2026-07-20 21:46:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr4benmlmo2q 2026-07-20 22:37:49+00:00| published-proof-of-concept|...

CVE-2026-33213

Redash vulnerability CVE-2026-33213 affects the data-visualization tool Redash (versions 5.0.2 through 26.3.0). The get_next_path() function in the authentication module strips the scheme and netloc from user-supplied next parameters but does not normalize multiple leading slashes, enabling an op...

CVE-2025-43892

creationtimestamp| type| source ---|---|--- 2026-07-15 14:20:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqow55nlat2n...

CVE-2025-62826

creationtimestamp| type| source ---|---|--- 2026-07-15 14:20:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqow55nlat2n...

CVE-2025-53379

creationtimestamp| type| source ---|---|--- 2026-07-15 14:20:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqow55nlat2n...

CVE-2026-6423

creationtimestamp| type| source ---|---|--- 2026-07-15 14:20:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqow4mqxk52f 2026-07-16 11:06:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqr3rrtfjf2x 2026-07-16 14:24:17+00:00| seen|...

CVE-2026-53566

creationtimestamp| type| source ---|---|--- 2026-07-15 14:15:26+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqovu3ew4h2c 2026-07-15 16:15:13+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/citrix-security-advisory-av26-702 2026-07-17 13:02:33+00:00| seen|...

CVE-2026-40633

creationtimestamp| type| source ---|---|--- 2026-07-15 12:42:46+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqoqokvbcy2b 2026-07-15 13:45:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqou66ize32w...

CVE-2026-56400

creationtimestamp| type| source ---|---|--- 2026-07-15 12:38:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqoqg5mume2p 2026-07-15 15:43:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp2rmdoce2e 2026-07-17 04:37:06+00:00| seen|...

CVE-2026-56699

creationtimestamp| type| source ---|---|--- 2026-07-15 12:36:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqoqclj6ai2j 2026-07-15 15:55:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp3god4i42i 2026-07-17 14:00:06+00:00| published-proof-of-concept|...

CVE-2026-48758

creationtimestamp| type| source ---|---|--- 2026-07-15 12:00:51+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mqoodma5yp2c 2026-07-27 03:18:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlwq6g4by2n...

EUVD-2026-44644

PraisonAI Platform before 0.1.9 fails to properly authorize label and issue-label mutations, allowing workspace members to rename and recolor shared labels and add or remove labels on owner-created issues. Attackers with workspace member privileges can exploit PATCH and POST/DELETE endpoints to...

CVE-2026-61440 PraisonAI Platform before 0.1.9 Authorization Bypass via Label Endpoints

PraisonAI Platform before 0.1.9 fails to properly authorize label and issue-label mutations, allowing workspace members to rename and recolor shared labels and add or remove labels on owner-created issues. Attackers with workspace member privileges can exploit PATCH and POST/DELETE endpoints to...

EUVD-2026-44641

PraisonAI before 4.6.78 contains an authentication bypass in the Call API agent invocation endpoints src/praisonai/praisonai/api/agentinvoke.py when PRAISONAICALLAUTH=disabled is configured. The safeguard intended to restrict the disabled-auth opt-out to localhost binding derives the bind host fr...

EUVD-2026-44622

Authorization Bypass Through User-Controlled Key CWE-639 in the Excel import handlers CustomerImport, LeadImport, ProductImport in Roskus Prospero Flow CRM before 5.14.0 allows a remote, authenticated user of any role or company to create customer, lead, and product records inside another company...

MAL-2026-10680 Malicious code in syncgrove (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c96b3528ab792944d243b00ae61facc33740850b5cb2ed19671fd6732e43494 The package's postinstall lifecycle script contacts a hardcoded plain-HTTP endpoint at http://player.sweeprovider.org, retrieves a key via /getKey.ph...

MAL-2026-10675 Malicious code in ac-raf-emitter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9d9e454c08fdafa531ee74a3bc52513d5bc39413810db4a6371494872984f8 package.json declares a preinstall lifecycle script that runs curl -X POST against a hardcoded webhook.site collector URL...

Uncontrolled Resource Consumption

github.com/spectolabs/hoverfly is vulnerable to Uncontrolled Resource Consumption Denial of Service. The vulnerability is due to the use of http.DefaultClient without a configured timeout for remote post-serve actions, which allows an attacker to trigger requests to a non-responsive endpoint,...

CVE-2026-12281

creationtimestamp| type| source ---|---|--- 2026-07-15 08:23:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqoc76djrl22 2026-07-15 12:00:16+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mqoockgock2y...