CVE-2026-52700

creationtimestamp| type| source ---|---|--- 2026-06-15 22:01:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moebwj2hkn26 2026-06-15 22:02:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moebymanjo2b...

CVE-2026-49778

creationtimestamp| type| source ---|---|--- 2026-06-15 19:16:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3modyoehafq2d 2026-06-15 19:27:41+00:00| seen| https://bsky.app/profile/potato.software/post/3modzcxu4oj2p...

CVE-2026-49109

creationtimestamp| type| source ---|---|--- 2026-06-15 09:16:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mocx5icftn2d 2026-06-15 10:01:19+00:00| seen| https://bsky.app/profile/hermes71.bsky.social/post/3moczoaj4gf2h 2026-06-15 10:34:18+00:00| seen|...

CVE-2026-12218

creationtimestamp| type| source ---|---|--- 2026-06-15 07:01:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116752835857280454 2026-06-15 07:53:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mocsjjd7el2p 2026-06-15 07:59:57+00:00| seen|...

CVE-2026-12220

creationtimestamp| type| source ---|---|--- 2026-06-15 07:00:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mocpkfa5of2w 2026-06-15 08:09:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moctguavyj2e...

CVE-2026-12214

creationtimestamp| type| source ---|---|--- 2026-06-15 05:00:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mocitrj45z2v 2026-06-15 06:00:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mocm7jz4ix2a 2026-06-15 06:00:33+00:00| seen|...

CVE-2026-12192

creationtimestamp| type| source ---|---|--- 2026-06-15 01:00:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moc3gsau3s22 2026-06-15 01:18:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moc4gzc3iz2b 2026-06-15 03:00:28+00:00| seen|...

CVE-2026-54410

creationtimestamp| type| source ---|---|--- 2026-06-14 19:00:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mobhcwfd6s2w 2026-06-14 20:02:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mobkt6lb7w2r...

CVE-2026-11623

creationtimestamp| type| source ---|---|--- 2026-06-14 13:14:10+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3moaty5dvts2o 2026-06-14 13:14:10+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3moaty4t3r22o 2026-06-15 20:38:55+00:00| seen|...

CVE-2026-7582

creationtimestamp| type| source ---|---|--- 2026-06-13 18:38:13+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mo6vmkuwkk26 2026-06-13 18:40:23+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mo6vmmqnos26...

CVE-2026-9109

creationtimestamp| type| source ---|---|--- 2026-06-13 09:00:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/116741978443656575 2026-06-13 09:01:21+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mo5vdj745l2x 2026-06-13 09:44:36+00:00| seen|...

CVE-2026-44783

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-latest to before 2026.4.1, a flaw in how replies to whisper posts are handled allows authenticated users outside the groups configured in...

Malicious code in claudechor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9cbb36cf7ed82685830b5d3a2b341bff9ef86e2688842d1f54259b2b6fb533 The package's bin entry reads installer-owned Claude credential files /.claude/.credentials.json and /.claude.json — written by Anthropic's official...

CVE-2026-44783 Discourse: Replying to a whisper lets non-whisperers create staff-only whisper posts

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-latest to before 2026.4.1, a flaw in how replies to whisper posts are handled allows authenticated users outside the groups configured in...

CVE-2026-44783

Product/Component : Discourse (open-source discussion platform). Issue : A flaw in how replies to whispers is handled allows authenticated users outside the groups configured in whispers_allowed_groups to post into a topic’s staff-only whisper channel. The injected content is visible to whisperer...

CVE-2026-44782 Discourse: GroupPostSerializer leaks hidden full names through reaction post association

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-latest to before 2026.4.1, GroupPostSerializer declared includeuserlongname? as the predicate for its :name attribute, but AMS looks for includename?...

CVE-2026-44780 Discourse: Category queue reviewers can read raw incoming emails from queued posts

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-latest to before 2026.4.1, ReviewableQueuedPostSerializer unconditionally included payload"rawemail" for posts that arrived via incoming email...

CVE-2026-44780

Summary of CVE-2026-44780 (Discourse) : The flaw arises in the ReviewableQueuedPostSerializer where, for posts arriving via incoming email, payload["raw_email"] was unconditionally included. This allowed category moderation group members in the review queue to access the full inbound email conten...

CVE-2026-44780 Discourse: Category queue reviewers can read raw incoming emails from queued posts

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-latest to before 2026.4.1, ReviewableQueuedPostSerializer unconditionally included payload"rawemail" for posts that arrived via incoming email...

CVE-2026-44780 Discourse: Category queue reviewers can read raw incoming emails from queued posts

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-latest to before 2026.4.1, ReviewableQueuedPostSerializer unconditionally included payload"rawemail" for posts that arrived via incoming email...