CVE-2026-12082

CVE-2026-12082 affects the Praison AI SEO WordPress plugin prior to version 5.0.7. The root cause is missing authorization checks on several REST API routes, allowing unauthenticated users to: (1) modify the permalink of any published post and (2) read the plugin’s configuration data from before ...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager (CVE-2026-11536)

Summary IBM WebSphere Application Server is used by IBM Tivoli System Automation Application Manager and is vulnerable to a remote code execution vulnerability. Required fixes for affected WebSphere Application Server has been published in the security bulletin links below. Vulnerability Details...

CVE-2026-58442

creationtimestamp| type| source ---|---|--- 2026-07-21 22:36:01+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-h2x6-g7q6-344v...

CVE-2026-58445

creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:54+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-pgqf-926r-548m...

CVE-2026-54481

creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:42+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-94v3-77j7-vm48...

CVE-2026-58420

creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:32+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-5ggr-2f2h-jmvm...

Stack-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow in the construction of the longname field during SFTP server directory listing. An attacker can cause a crash or execute arbitrary code on the server by supplying specially crafted, excessively long filenames...

CVE-2026-59727

creationtimestamp| type| source ---|---|--- 2026-07-21 00:35:05+00:00| published-proof-of-concept| https://github.com/withastro/astro/security/advisories/GHSA-7pw4-f3q4-r2p2...

CVE-2026-57143

creationtimestamp| type| source ---|---|--- 2026-07-20 22:37:53+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-4pcv-mg8v-vrgf...

CVE-2026-56835

creationtimestamp| type| source ---|---|--- 2026-07-20 22:37:12+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-qvpf-j64c-jmhr...

CVE-2026-57118

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:48+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-x8cv-xmq7-p8xp...

CVE-2026-57122

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:33+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-x92v-rpx6-p6cw...

CVE-2026-57124

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:31+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-p75f-6fp4-p57w 2026-07-23 17:02:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdcvkwlge2r...

CVE-2026-57130

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:17+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-c969-5x3p-vq3v...

CVE-2026-57145

creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:46+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-29w3-p9w9-wc47 2026-07-23 17:02:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdcvlzsfq2u...

CVE-2026-57148

creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:41+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-f38v-77qj-h4jq 2026-07-23 17:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdcz5u56b2v...

CVE-2026-57209

creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:38+00:00| published-proof-of-concept| https://github.com/dadrus/heimdall/security/advisories/GHSA-4jgr-pg2m-m988...

CVE-2026-59871

creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:05+00:00| published-proof-of-concept| https://github.com/isaacs/node-tar/security/advisories/GHSA-w8wr-v893-vjvp 2026-07-22 12:01:14+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mrabmqeztj2n...

CVE-2021-24508

creationtimestamp| type| source ---|---|--- 2026-07-20 21:00:05+00:00| seen| https://t.me/crackvaultde/1222 2026-07-20 21:00:05+00:00| published-proof-of-concept| https://t.me/crackvaultde/1223 2026-07-21 00:00:11+00:00| seen| https://t.me/crackvaultde/1222 2026-07-21 00:00:11+00:00|...

EUVD-2026-46063

The Joomla extension Quix Page Builder Pro is vulnerable to a unauthenticated path traversal via form elements. Unauthenticated users frontend users are allowed traversal paths and read arbitrary files. Requires a published page with a Form element...