Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say

Redis shipped seven security releases on July 23 after researchers published authenticated RCE PoCs for stock Redis 6.2.22, 7.4.9, 8.6.4, and 8.8.0. All four chains require RESTORE. The Streams chains also need EVAL and XGROUP; the 8.8.0 chain needs EVAL and the bundled RedisBloom module. Redis...

WordPress Copyright Proof <=4.16 - Cross-Site-Scripting

WordPress Copyright Proof plugin 4.16 and prior contains a cross-site scripting vulnerability. It does not sanitize and escape a parameter before outputting it back via an AJAX action available to both unauthenticated and authenticated users when a specific setting is enabled. id: CVE-2022-1906...

CVE-2026-65971

creationtimestamp| type| source ---|---|--- 2026-07-23 23:00:03+00:00| seen| https://t.me/GithubRedTeam/94876 2026-07-24 00:00:07+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/94876 2026-07-24 01:00:03+00:00| seen| Telegram/lPm2d4VYpYEjn3m2EVnzf33SWkbqRmjBxDEhEFxEK5fDURE 2026-07-2...

CVE-2026-65902

creationtimestamp| type| source ---|---|--- 2026-07-23 16:35:19+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-76mc-f452-cxcm...

CVE-2026-59919

creationtimestamp| type| source ---|---|--- 2026-07-22 22:35:08+00:00| published-proof-of-concept| https://github.com/netty/netty/security/advisories/GHSA-wh89-7897-x99h...

CVE-2026-13204

If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unexpectedly with an assertion while validating this proof. Mitigation Upgrade to the patched release most closely related to your...

CVE-2026-59892

creationtimestamp| type| source ---|---|--- 2026-07-21 20:35:11+00:00| published-proof-of-concept| https://github.com/open-telemetry/opentelemetry-js/security/advisories/GHSA-45rx-2jwx-cxfr...

GHSA-V396-V7Q4-X2QJ GitPython unsafe clone option gate bypass through joined short options

GitPython version 3.1.50 blocks unsafe git clone options such as --upload-pack, -u, --config, and -c unless callers explicitly pass allowunsafeoptions=True. However, the default unsafe-option gate does not recognize joined short-option forms such as -u/path/to/helper. Git itself accepts -u as the...

CVE-2026-57496

creationtimestamp| type| source ---|---|--- 2026-07-21 14:35:14+00:00| published-proof-of-concept| https://github.com/Labs64/NetLicensing-MCP/security/advisories/GHSA-hxpf-9xvq-wph8 2026-07-23 17:06:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdd4qyqvr2a...

CVE-2026-62843

creationtimestamp| type| source ---|---|--- 2026-07-21 00:35:28+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-83xp-526h-j3ww...

CVE-2026-62684

creationtimestamp| type| source ---|---|--- 2026-07-21 00:35:26+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-833g-cqhp-h72j...

CVE-2026-59197

creationtimestamp| type| source ---|---|--- 2026-07-21 00:35:21+00:00| published-proof-of-concept| https://github.com/python-pillow/Pillow/security/advisories/GHSA-xj96-63gp-2gmr 2026-07-21 12:31:41+00:00| seen| https://gist.github.com/alon710/a3a7380a4e0465c6c32d9063bd8033a6 2026-07-22...

CVE-2026-59198

creationtimestamp| type| source ---|---|--- 2026-07-21 00:35:19+00:00| published-proof-of-concept| https://github.com/python-pillow/Pillow/security/advisories/GHSA-fj7v-r99m-22gq 2026-07-21 11:31:12+00:00| seen| https://gist.github.com/alon710/48f3deb1ca1eafb4018fbe6276da18c1...

CVE-2026-59199

creationtimestamp| type| source ---|---|--- 2026-07-21 00:35:17+00:00| published-proof-of-concept| https://github.com/python-pillow/Pillow/security/advisories/GHSA-6r8x-57c9-28j4 2026-07-21 10:31:21+00:00| seen| https://gist.github.com/alon710/8369d28698d5eaa2f4badffaca60e4b4...

CVE-2026-59200

creationtimestamp| type| source ---|---|--- 2026-07-21 00:35:14+00:00| published-proof-of-concept| https://github.com/python-pillow/Pillow/security/advisories/GHSA-jjj6-mw9f-p565 2026-07-21 09:31:09+00:00| seen| https://gist.github.com/alon710/58614afe66c43fc333bb604ba1de657d 2026-07-22...

CVE-2026-59203

creationtimestamp| type| source ---|---|--- 2026-07-21 00:35:12+00:00| published-proof-of-concept| https://github.com/python-pillow/Pillow/security/advisories/GHSA-pg7v-jwj7-p798 2026-07-21 08:31:39+00:00| seen| https://gist.github.com/alon710/afd430e951c08264a9a3f3da451132a3...

CVE-2026-59205

creationtimestamp| type| source ---|---|--- 2026-07-21 00:35:08+00:00| published-proof-of-concept| https://github.com/python-pillow/Pillow/security/advisories/GHSA-9hw9-ch79-4vh6 2026-07-21 06:31:17+00:00| seen| https://gist.github.com/alon710/c194376028b5fea9d1333b8a7894f724...

CVE-2026-59727

creationtimestamp| type| source ---|---|--- 2026-07-21 00:35:05+00:00| published-proof-of-concept| https://github.com/withastro/astro/security/advisories/GHSA-7pw4-f3q4-r2p2...

CVE-2026-59728

creationtimestamp| type| source ---|---|--- 2026-07-21 00:35:03+00:00| published-proof-of-concept| https://github.com/withastro/astro/security/advisories/GHSA-8j5q-mfj2-5q9q...

CVE-2026-56840

creationtimestamp| type| source ---|---|--- 2026-07-20 22:37:58+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-63v4-w882-g4x2...