CVE-2026-54896

creationtimestamp| type| source ---|---|--- 2026-07-01 01:55:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkfxmo5vk26 2026-07-01 22:02:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmjfxrnov2i 2026-07-02 01:16:16+00:00| seen|...

CVE-2026-50110

creationtimestamp| type| source ---|---|--- 2026-07-01 00:00:39+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpk7kukqzx2v 2026-07-01 00:00:43+00:00| seen| https://infosec.exchange/users/offseq/statuses/116841777496408584 2026-07-01 02:31:46+00:00| seen|...

PT-2026-54922

Name of the Vulnerable Software and Affected Versions NodeBB affected versions not specified Description NodeBB fails to bind the claimed author of an inbound ActivityPub object to the authenticated remote actor. While the inbound middleware verifies the HTTP-signature actor and the origin of the...

CVE-2026-58593: Insufficient Verification of Data Authenticity

NodeBB does not bind the claimed author of an inbound ActivityPub object to the authenticated remote actor. The inbound middleware verifies the HTTP-signature actor and checks the origin of object.id, but never validates that attributedTo corresponds to the sender. In the object mock, attributedT...

CVE-2026-11570: Undefined Security Weakness

The User Submitted Posts WordPress plugin before 20260608 does not escape a submitted value before outputting it in an admin-configured display template, leading to a Stored Cross-Site Scripting that can be triggered by unauthenticated users when a non-default display option is enabled...

CVE-2026-12243

creationtimestamp| type| source ---|---|--- 2026-06-30 01:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mphu4lougb2t 2026-06-30 01:30:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116836468435158836 2026-06-30 01:43:05+00:00| seen|...

PT-2026-55076

@tryghost/activitypub is Ghost’s social/federation client app. Prior to 3.1.0, the ActivityPub client in Ghost was vulnerable to JavaScript injection on posts shared by a maliciously customised ActivityPub server. This vulnerability is fixed in 3.1.0...

PT-2026-55072

Ghost is a Node.js content management system. From 6.19.4 until 6.21.1, when re-rendering posts, Ghost would refetch missing image dimensions by issuing an outbound HTTP request to the URL stored on an image card — without restricting that URL to trusted image hosts. An authenticated staff user...

CVE-2026-7656

creationtimestamp| type| source ---|---|--- 2026-06-29 23:57:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphowclzrx2y 2026-06-30 00:01:40+00:00| seen| https://gist.github.com/ichintu/8b78df900d5aca0afc4dd97225bd83dc 2026-06-30 01:15:37+00:00| seen|...

CVE-2026-34594

creationtimestamp| type| source ---|---|--- 2026-06-29 23:05:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphlzfdtu62u 2026-06-29 23:30:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphngsa7rd23 2026-06-30 00:01:40+00:00| seen|...

CVE-2026-43700

creationtimestamp| type| source ---|---|--- 2026-06-29 22:59:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116835873701664332 2026-06-29 23:41:03+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mphnyw7rag2k 2026-06-29 23:41:05+00:00| seen|...

CVE-2026-57919

creationtimestamp| type| source ---|---|--- 2026-06-29 22:42:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphkqmadqv23 2026-06-29 23:26:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphn6ropp32n...

CVE-2026-55956

creationtimestamp| type| source ---|---|--- 2026-06-29 22:38:43+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mphkji2ejb2s 2026-06-29 23:02:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphltgcvtn24 2026-06-29 23:19:22+00:00| seen|...

CVE-2026-57498

creationtimestamp| type| source ---|---|--- 2026-06-29 22:37:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphkgkb5nx2y 2026-06-29 23:03:43+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mphlw6ku5s2x 2026-06-29 23:28:36+00:00| seen|...

CVE-2026-43746

creationtimestamp| type| source ---|---|--- 2026-06-29 22:36:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphkfgu6mp2k 2026-06-29 23:26:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116835979854649291 2026-07-01 02:50:40+00:00| seen|...

CVE-2026-55276

creationtimestamp| type| source ---|---|--- 2026-06-29 22:28:43+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mphjxl65jr27 2026-06-29 22:59:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphlo2ck6t24 2026-06-29 23:11:34+00:00| seen|...

CVE-2026-13762

creationtimestamp| type| source ---|---|--- 2026-06-29 22:08:54+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mphiu4vkl324 2026-06-29 22:50:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphl6qlfck2s 2026-06-29 23:12:40+00:00| seen|...

CVE-2026-53426

creationtimestamp| type| source ---|---|--- 2026-06-29 22:01:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphiguy5rn2x 2026-06-29 22:36:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphkestmkb2d 2026-06-29 23:20:45+00:00| seen|...

CVE-2026-3472

creationtimestamp| type| source ---|---|--- 2026-06-29 21:43:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphhgs6dm723 2026-06-29 21:43:35+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mphhguw4wr26...

CVE-2026-57943

creationtimestamp| type| source ---|---|--- 2026-06-29 18:50:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph5qivxkj23 2026-06-29 18:50:10+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mph5qrtque2t 2026-06-29 22:17:23+00:00| seen|...