CVE-2026-58031

creationtimestamp| type| source ---|---|--- 2026-07-02 00:31:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmrq67sel2b...

CVE-2026-2891

creationtimestamp| type| source ---|---|--- 2026-07-02 00:30:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmrpgfmrh2y...

CVE-2026-14060

creationtimestamp| type| source ---|---|--- 2026-07-02 00:19:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmr3r52lx2d 2026-07-02 07:51:01+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 19:11:52+00:00| seen|...

CVE-2026-14425

creationtimestamp| type| source ---|---|--- 2026-07-02 00:11:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpmqnx5sqz2p 2026-07-02 01:01:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpmth33zkl2b 2026-07-02 04:46:12+00:00| seen|...

CVE-2026-14417

creationtimestamp| type| source ---|---|--- 2026-07-02 00:09:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpmqj2s5wc2e 2026-07-02 02:01:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpmwrtq35n2x 2026-07-02 03:00:27+00:00| seen|...

CVE-2026-50279

creationtimestamp| type| source ---|---|--- 2026-07-02 00:06:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpmqelc4it2n 2026-07-02 16:31:58+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpohggb6vs2a 2026-07-02 16:31:58+00:00| seen|...

next.js: Next.js: Denial of Service via crafted POST requests to server actions

A flaw was found in Next.js. Applications utilizing Partial Prerendering via the Cache Components feature are susceptible to connection exhaustion. A remote attacker can send crafted POST requests to a server action, triggering a request-body handling deadlock. This leaves connections open,...

Malicious code in @marketfront/bannerpopup (npm)

The @marketfront/bannerpopup package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0.0 and use...

Malicious code in @marketfront/errorcounter (npm)

The @marketfront/errorcounter package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0.0 and use...

Malicious code in @marketfront/blenderdevtool (npm)

The @marketfront/blenderdevtool package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0.0 and use...

Malicious code in @marketfront/customdealsfeed (npm)

The @marketfront/customdealsfeed package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0.0 and use...

PT-2026-54640

Name of the Vulnerable Software and Affected Versions Request a Quote versions prior to 2.5.6 Description The Request a Quote plugin for WordPress allows unauthenticated attackers to perform code injection. The issue occurs because the emd delete file function derives a PHP function name from the...

MAL-2026-6779 Malicious code in @marketfront/fingerprint (npm)

The @marketfront/fingerprint package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0.0 and use...

MAL-2026-6772 Malicious code in @marketfront/customdealsfeed (npm)

The @marketfront/customdealsfeed package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0.0 and use...

PT-2026-54948

Name of the Vulnerable Software and Affected Versions PIA affected versions not specified Description The OIDC issuer allowlist for Jenkins tokens uses a bare string-prefix check instead of validating the issuer as a properly host-bounded URL. This allows an attacker to bypass the check using a...

CVE-2026-55791

creationtimestamp| type| source ---|---|--- 2026-07-01 23:58:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpmpvmvzr52u 2026-07-02 16:32:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpohhzys7f2w...

CVE-2026-14390

creationtimestamp| type| source ---|---|--- 2026-07-01 23:54:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpmpphwqn62e 2026-07-02 07:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116849208764595962 2026-07-02 07:30:31+00:00| seen|...

CVE-2026-14424

creationtimestamp| type| source ---|---|--- 2026-07-01 23:51:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpmpjx4mny2v 2026-07-02 04:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116848500782460057 2026-07-02 04:30:28+00:00| seen|...

CVE-2026-14067

creationtimestamp| type| source ---|---|--- 2026-07-01 23:41:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmoyeg24d2d 2026-07-02 03:40:35+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn4d3bn6e2t 2026-07-02 07:51:16+00:00| seen|...

CVE-2026-50279 Craft CMS: Authorship spoofing in `entries/save-entry` via pre-check/post-mutation authorization gap

Craft CMS is a content management system CMS. IN versions 5.0.0-RC1 and above prior to 5.9.21, theEntriesController::actionSaveEntry performs entry-edit permission checks before request-controlled author changes are applied to the model, allowing for authorship spoofing. The subsequent author...