Exploit for Improper Access Control in Widgetfactorylimited Jce

CVE-2026-48907 — Joomla JCE Unauthenticated RCE Lab PSsec...

CVE-2026-14209

A vulnerability was discovered in Keycloak's Admin UI extension that allows certain administrative users to bypass security restrictions. When Fine-Grained Admin Permissions FGAPv2 are enabled, an administrator who should only be able to search for users but not view their full details can use a...

CVE-2026-6556

creationtimestamp| type| source ---|---|--- 2026-06-30 12:54:39+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mpj2dxzyik2z 2026-06-30 14:01:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj63qsdtd2f 2026-07-02 06:37:07+00:00| seen|...

CVE-2026-14209

A vulnerability was discovered in Keycloak's Admin UI extension that allows certain administrative users to bypass security restrictions. When Fine-Grained Admin Permissions FGAPv2 are enabled, an administrator who should only be able to search for users but not view their full details can use a...

Malicious code in anthropic-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90ec82c6478e3a82eac71597b1c1fffc17d1b138e11e1a2aeadec7c00344c65e [email protected] is a typosquat against the @anthropic-ai/sdk ecosystem. The package ships no library code — its declared main dist/index.js i...

CVE-2026-8023

creationtimestamp| type| source ---|---|--- 2026-06-30 00:00:39+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mphp3wwrcd2d 2026-06-30 00:00:42+00:00| seen| https://infosec.exchange/users/offseq/statuses/116836115168562466 2026-06-30 00:06:29+00:00| seen|...

CVE-2026-34592

creationtimestamp| type| source ---|---|--- 2026-06-29 23:43:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpho4kfo3b2t 2026-06-30 02:42:03+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mphy4l7znf2i...

CVE-2026-57498

creationtimestamp| type| source ---|---|--- 2026-06-29 22:37:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphkgkb5nx2y 2026-06-29 23:03:43+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mphlw6ku5s2x 2026-06-29 23:28:36+00:00| seen|...

CVE-2026-55276

creationtimestamp| type| source ---|---|--- 2026-06-29 22:28:43+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mphjxl65jr27 2026-06-29 22:59:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphlo2ck6t24 2026-06-29 23:11:34+00:00| seen|...

CVE-2026-13758

creationtimestamp| type| source ---|---|--- 2026-06-29 22:12:19+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mphj2b3ym623 2026-06-29 22:53:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphleohj6h2v 2026-06-29 23:32:10+00:00| seen|...

CVE-2026-13593

creationtimestamp| type| source ---|---|--- 2026-06-29 21:46:13+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mphhllqbix2z 2026-06-29 23:40:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphnxisglw2k 2026-06-29 23:56:39+00:00| seen|...

CVE-2026-3472

creationtimestamp| type| source ---|---|--- 2026-06-29 21:43:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphhgs6dm723 2026-06-29 21:43:35+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mphhguw4wr26...

EUVD-2026-40162

PhotoPrism before 260601-a7d098548 contains a broken access control vulnerability that allows authenticated non-admin users to modify other users' profile information by sending requests to arbitrary user endpoints. Attackers can exploit the missing session-to-user identifier validation in the PU...

CVE-2026-57330

creationtimestamp| type| source ---|---|--- 2026-06-29 16:13:55+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpguzf6j6j2g 2026-06-29 16:13:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpguzfc7bf2d...

CVE-2026-57329

creationtimestamp| type| source ---|---|--- 2026-06-29 16:11:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpguvpeeku2d 2026-06-29 16:11:55+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpguvtbqfo2w...

CVE-2026-56457

creationtimestamp| type| source ---|---|--- 2026-06-29 16:04:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgujdz3qn2w 2026-06-29 16:04:57+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpgujdy5vf2t 2026-06-29 20:13:24+00:00| seen|...

CVE-2026-46817

creationtimestamp| type| source ---|---|--- 2026-06-29 13:46:37+00:00| seen| https://bsky.app/profile/bleepingcomputer.com/post/3mpgmrwrd2525 2026-06-29 14:01:32+00:00| seen| https://bsky.app/profile/sec-news-bot.bsky.social/post/3mpgnmnxscm2c 2026-06-29 14:03:49+00:00| seen|...

CVE-2026-13553

creationtimestamp| type| source ---|---|--- 2026-06-29 11:51:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpggeworr225 2026-06-29 14:06:08+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mpgnuv2el52b...

CVE-2026-13539

creationtimestamp| type| source ---|---|--- 2026-06-29 07:55:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpfz6rgc6q2y 2026-06-29 08:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpfzhmjhwp26 2026-06-29 10:53:23+00:00| seen|...

MAL-2026-6582 Malicious code in openai-agents-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 768ddf82a7644f1678a27f3037c8a3fc4fae5f00b6181d6507a49892d20a7fda On npm install, scripts/postinstall.js automatically reads a broad set of installer-side identity and cloud-configuration files — /.gitconfig and the...