CVE-2026-28381

creationtimestamp| type| source ---|---|--- 2026-06-22 16:43:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movdgbwzk622 2026-06-22 17:06:39+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3movepagixn2c 2026-06-22 22:26:13+00:00| seen|...

CVE-2026-6062

creationtimestamp| type| source ---|---|--- 2026-06-22 16:38:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movd5djfrc2j...

CVE-2025-33128

creationtimestamp| type| source ---|---|--- 2026-06-22 16:28:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movclgmg3t2y...

MAL-2026-6263 Malicious code in gd-auth-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4de00613e21b42bf3c651995beae63ff9d85772b9370145152d172a062be4fb7 package.json declares preinstall: node index.js, which runs automatically on npm install. index.js requires os, dns, https, querystring, and the loca...

CVE-2026-6673

creationtimestamp| type| source ---|---|--- 2026-06-22 16:23:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movcci4nxt2g...

CVE-2026-7166

creationtimestamp| type| source ---|---|--- 2026-06-22 16:19:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movc2shx3i2q 2026-06-22 19:30:12+00:00| seen| https://infosec.exchange/users/offseq/statuses/116795415672753898 2026-06-22 19:30:14+00:00| seen|...

CVE-2026-9162

creationtimestamp| type| source ---|---|--- 2026-06-22 16:15:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movbu35xhn2t...

CVE-2026-7167

creationtimestamp| type| source ---|---|--- 2026-06-22 16:12:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movbo42pdw22...

CVE-2026-50184

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23, an issue in the @angular/service-worker package compromises the integrity of request-policy enforcement during...

Threat Hunting Beyond Alerts: Finding the Activity Detection Misses

Disclosure: This article was provided by ANY.RUN. The information and analysis presented are based on their research and findings...

EUVD-2026-38249

Mattermost versions 11.7.x = 11.7.0, 11.6.x = 11.6.2, 11.5.x = 11.5.5, 10.11.x = 10.11.17 fail to authenticate Atlassian Connect installed callbacks, allowing a remote unauthenticated attacker to inject a rogue sharedSecret and disrupt the Jira integration via POST to /ac/installed during the...

CVE-2026-12580

creationtimestamp| type| source ---|---|--- 2026-06-22 12:17:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mouujtdzm622...

CVE-2026-49056

creationtimestamp| type| source ---|---|--- 2026-06-22 12:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mouuhr7hhs2m...

CVE-2026-12862

creationtimestamp| type| source ---|---|--- 2026-06-22 12:00:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moutmiscx52y...

CVE-2025-4994

creationtimestamp| type| source ---|---|--- 2026-06-22 11:57:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mouth4sr262t...

CVE-2026-48878

creationtimestamp| type| source ---|---|--- 2026-06-22 11:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mour4goqj72r...

WordPress Motors Car Dealership & Classified Listings plugin < 1.4.110 - Unauthenticated Post-Meta Write via stm_ajax_add_a_car_media vulnerability

Unauthenticated Post-Meta Write via stmajaxaddacarmedia vulnerability discovered by Mustafa Ahmed in WordPress Plugin Motors versions 1.4.110...

CVE-2026-48880

creationtimestamp| type| source ---|---|--- 2026-06-22 07:16:21+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3moudpon4vj2i...

CVE-2026-7859

The Motors WordPress plugin before 1.4.110 does not have proper authorisation and CSRF checks on one of its AJAX actions, allowing unauthenticated attackers to modify arbitrary post metadata, such as the gallery, featured image and, on WooCommerce sites, product prices...

CVE-2026-7859 Motors Car Dealership & Classified Listings < 1.4.110 - Unauthenticated Post-Meta Write via stm_ajax_add_a_car_media

The Motors WordPress plugin before 1.4.110 does not have proper authorisation and CSRF checks on one of its AJAX actions, allowing unauthenticated attackers to modify arbitrary post metadata, such as the gallery, featured image and, on WooCommerce sites, product prices...