CVE-2026-7204

creationtimestamp| type| source ---|---|--- 2026-04-28 01:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116479743048315445 2026-04-28 01:44:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkjhishfjn2r 2026-04-28 02:00:31+00:00| seen|...

CVE-2026-6741

creationtimestamp| type| source ---|---|--- 2026-04-27 21:00:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkixnm7i5g2t 2026-04-27 21:01:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkixpgj3wt2n 2026-04-28 19:33:06+00:00| seen|...

CVE-2026-7153

creationtimestamp| type| source ---|---|--- 2026-04-27 21:00:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkixneplf62t 2026-04-27 21:01:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkixp74yld2f...

CVE-2026-42613

creationtimestamp| type| source ---|---|--- 2026-04-27 12:15:23+00:00| published-proof-of-concept| https://github.com/getgrav/grav/security/advisories/GHSA-pxm6-mhxr-q4mj 2026-05-11 17:03:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllqvvrpcy26 2026-05-11...

CVE-2026-42315

creationtimestamp| type| source ---|---|--- 2026-04-27 08:09:32+00:00| published-proof-of-concept| https://github.com/pyload/pyload/security/advisories/GHSA-838g-gr43-qqg9 2026-05-11 18:24:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllvhstyvk2c 2026-05-11...

CVE-2026-7059

A vulnerability was found in 666ghj MiroFish up to 0.1.2. This affects the function getsimulationposts of the file backend/app/api/simulation.py of the component Query Parameter Handler. Performing a manipulation of the argument Platform results in path traversal. The attack can be initiated...

CVE-2026-7059

The CVE-2026-7059 entry concerns 666ghj MiroFish (affected up to version 0.1.2). The vulnerability lies in the get_simulation_posts function of backend/app/api/simulation.py within the Query Parameter Handler. An attacker can achieve path traversal by manipulating the Platform argument. The issue...

EUVD-2026-25729

A vulnerability was found in 666ghj MiroFish up to 0.1.2. This affects the function getsimulationposts of the file backend/app/api/simulation.py of the component Query Parameter Handler. Performing a manipulation of the argument Platform results in path traversal. The attack can be initiated...

CVE-2026-7059

A vulnerability was found in 666ghj MiroFish up to 0.1.2. This affects the function getsimulationposts of the file backend/app/api/simulation.py of the component Query Parameter Handler. Performing a manipulation of the argument Platform results in path traversal. The attack can be initiated...

CVE-2026-7059 666ghj MiroFish Query Parameter simulation.py get_simulation_posts path traversal

A vulnerability was found in 666ghj MiroFish up to 0.1.2. This affects the function getsimulationposts of the file backend/app/api/simulation.py of the component Query Parameter Handler. Performing a manipulation of the argument Platform results in path traversal. The attack can be initiated...

CVE-2026-7059 666ghj MiroFish Query Parameter simulation.py get_simulation_posts path traversal

A vulnerability was found in 666ghj MiroFish up to 0.1.2. This affects the function getsimulationposts of the file backend/app/api/simulation.py of the component Query Parameter Handler. Performing a manipulation of the argument Platform results in path traversal. The attack can be initiated...

CVE-2026-9135

creationtimestamp| type| source ---|---|--- 2026-04-26 15:13:52+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mkftsxttik2h 2026-04-26 15:13:52+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mkftsw4gzs2h 2026-07-17 19:20:04+00:00| seen|...

PT-2026-35238

A vulnerability was found in 666ghj MiroFish up to 0.1.2. This affects the function get simulation posts of the file backend/app/api/simulation.py of the component Query Parameter Handler. Performing a manipulation of the argument Platform results in path traversal. The attack can be initiated...

MiroFish 路径遍历漏洞

MiroFish is a crowd intelligence prediction engine developed by BaiFu personally. It is used to simulate and predict the future. Versions of MiroFish prior to 0.1.2 have a path traversal vulnerability. This vulnerability stems from improper handling of the Platform parameter in the...

CVE-2026-33317

creationtimestamp| type| source ---|---|--- 2026-04-24 03:56:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk7n2d676i2w 2026-04-24 03:56:43+00:00| seen| https://bsky.app/profile/potato.software/post/3mk7n2e3ejh25 2026-04-24 03:57:24+00:00| seen|...

PT-2026-37169

Name of the Vulnerable Software and Affected Versions Lemmy versions prior to 0.19.18 Description An authenticated low-privileged user can trigger server-side HTTP requests toward internal services. This occurs when a user creates a link post in a public community via the "POST /api/v3/post"...

CVE-2026-41353

creationtimestamp| type| source ---|---|--- 2026-04-23 22:25:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk72koj46b2w 2026-04-23 22:26:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk72mlk4ff2g 2026-04-23 23:27:23+00:00| seen|...

CVE-2026-33318

creationtimestamp| type| source ---|---|--- 2026-04-23 20:22:56+00:00| published-proof-of-concept| https://github.com/actualbudget/actual/security/advisories/GHSA-prp4-2f49-fcgp 2026-04-24 03:56:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk7n2kb7sz2z 2026-04-24...

CVE-2026-42606

creationtimestamp| type| source ---|---|--- 2026-04-23 19:37:18+00:00| published-proof-of-concept| https://github.com/AzuraCast/AzuraCast/security/advisories/GHSA-gv7r-3mr9-h5x8 2026-05-09 21:00:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlh5aco5sj2e 2026-05-09...

Ajax Load More < 7.6.1 - Unauthenticated Sensitive Information Exposure

The Ajax Load More – Infinite Scroll plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.6.0.2. The plugin's AJAX endpoint wpajaxnoprivalmgetposts allows unauthenticated users to access non-public posts draft, private, pending, future, tras...