CVE-2026-11407

creationtimestamp| type| source ---|---|--- 2026-06-17 23:08:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojgm4xmdy2j...

Malicious code in uol-simple-api-futebol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 962c38ed6ec061ce6a530aeea5a960dfc2b75caec56f7a1bc648f6b6cb655271 The package's only documented function, getJogos default export, unconditionally invokes an internal helper named prepareCacheMatchs which POSTs the...

CVE-2026-53805

creationtimestamp| type| source ---|---|--- 2026-06-17 21:57:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojcnac43b2v 2026-06-18 07:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mokcncgamb2g 2026-07-16 19:00:08+00:00| seen|...

CVE-2026-7300

creationtimestamp| type| source ---|---|--- 2026-06-17 21:42:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojbse7s6j2k...

CVE-2025-36220

creationtimestamp| type| source ---|---|--- 2026-06-17 21:15:25+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mojabhsgt52t 2026-08-15 02:34:07+00:00| seen| https://bsky.app/profile/vulny-app.bsky.social/post/3mt3n4kw7zd26...

CVE-2026-48142

creationtimestamp| type| source ---|---|--- 2026-06-17 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1927 2026-06-17 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1929 2026-06-18 13:10:33+00:00| seen|...

CVE-2026-48814

creationtimestamp| type| source ---|---|--- 2026-06-17 20:30:15+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3moj5qnuvcd2w 2026-06-17 22:38:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojevvheah2c 2026-06-19 13:34:24+00:00| published-proof-of-concept|...

Avo: Missing Authorization in Avo Association Attach Endpoint Allows Unauthorized Relationship Manipulation and Privilege Escalation

Summary A critical missing authorization flaw exists in Avo's association attach workflow. The UI and GET /resources/:resource/:id/:related/new path can check attach?, but the actual write endpoint, POST /resources/:resource/:id/:related, does not run the same authorization check before mutating...

CVE-2026-12515

creationtimestamp| type| source ---|---|--- 2026-06-17 18:31:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moix4m6zw52r...

CVE-2026-20190

creationtimestamp| type| source ---|---|--- 2026-06-17 18:24:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiwpw3s7724 2026-06-17 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1928 2026-06-18 13:15:12+00:00| seen|...

CVE-2026-54808

creationtimestamp| type| source ---|---|--- 2026-06-17 18:09:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moivvl4wvi2f 2026-06-18 09:06:44+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mokhzerxt623 2026-06-29 06:16:07+00:00| seen|...

CVE-2026-54415

creationtimestamp| type| source ---|---|--- 2026-06-17 17:57:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiv74u5gc2t 2026-06-18 12:08:27+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3moks6clrea23 2026-07-13 22:00:12+00:00| seen|...

CVE-2026-11311

creationtimestamp| type| source ---|---|--- 2026-06-17 17:56:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiv4utt3m2c 2026-06-17 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1929 2026-06-25 16:45:35+00:00| seen|...

CVE-2026-42055

creationtimestamp| type| source ---|---|--- 2026-06-17 17:47:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiunvadrb24 2026-06-17 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1927 2026-06-17 21:00:00+00:00| seen|...

CVE-2026-35065

creationtimestamp| type| source ---|---|--- 2026-06-17 17:27:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moitk2sat52j 2026-07-01 14:37:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mplqk4xeg52l...

CVE-2026-32804

creationtimestamp| type| source ---|---|--- 2026-06-17 17:23:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moitcf5f5w2f 2026-07-23 10:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrcnf7csgh2u...

CVE-2022-44462

creationtimestamp| type| source ---|---|--- 2026-06-17 16:27:22+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3moiq6fov5l2c...

CVE-2026-12151

creationtimestamp| type| source ---|---|--- 2026-06-17 16:12:44+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3moipe7e5is2g 2026-06-17 18:55:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiyi3y4jq27 2026-06-18 15:59:01+00:00| seen|...

CVE-2026-49268

creationtimestamp| type| source ---|---|--- 2026-06-17 15:22:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3moimkre7522k 2026-06-18 17:05:17+00:00| seen| https://bsky.app/profile/canartuc.com/post/3molcr4tjop2y 2026-06-22 00:31:29+00:00| seen|...

CVE-2024-35690

creationtimestamp| type| source ---|---|--- 2026-06-17 15:17:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moimbjw2ro27...