CVE-2026-9145

The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to Arbitrary File Copy via the createentryel function in versions up to, and including, 1.5.1. The function reads rawvalue from Elementor Pro's FormRecord object for upload-type fields and passes it...

CVE-2026-34096

creationtimestamp| type| source ---|---|--- 2026-07-02 09:32:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnpyymgeu2r...

CVE-2026-13789

creationtimestamp| type| source ---|---|--- 2026-07-02 09:19:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnpbyrfop2t 2026-07-03 07:31:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppzph3j3t2d 2026-07-07 21:53:57+00:00| seen|...

WordPress SEOWP theme <= 3.12.2 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by adhikara13 in WordPress Theme SEOWP versions = 3.12.2...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the beforerequest handler in the trace API endpoints. An authenticated attacker can bypass access controls by sending trace read, search, delete, update, linking, or assessment requests for experiments they do...

CVE-2026-14412

creationtimestamp| type| source ---|---|--- 2026-07-02 08:26:05+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 16:28:46+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpohapohdu2y 2026-07-03 19:57:15+00:00| seen|...

CVE-2026-14144

creationtimestamp| type| source ---|---|--- 2026-07-02 08:21:16+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:48:03+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706...

CVE-2026-14132

creationtimestamp| type| source ---|---|--- 2026-07-02 08:19:28+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:47:30+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706...

ROOT-APP-NPM-CVE-2026-39365 CVE-2026-39365 in @rootio/vite - Patched by Root

Root has patched CVE-2026-39365 in the @rootio/vite package for Root:npm. Multiple fixed versions available...

CVE-2026-45792

creationtimestamp| type| source ---|---|--- 2026-07-02 07:59:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnkrzdcap2k...

CVE-2026-13455

creationtimestamp| type| source ---|---|--- 2026-07-02 07:57:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnkpe4emx2i...

CVE-2026-14050

creationtimestamp| type| source ---|---|--- 2026-07-02 07:50:39+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:23:36+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706...

CVE-2026-14020

creationtimestamp| type| source ---|---|--- 2026-07-02 07:49:35+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 11:12:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnvlvef7k2m 2026-07-06 07:22:15+00:00| seen|...

CVE-2026-13982

creationtimestamp| type| source ---|---|--- 2026-07-02 07:48:12+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-03 06:25:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppvzfu4b42o 2026-07-03 06:25:47+00:00| seen|...

CVE-2026-13915

creationtimestamp| type| source ---|---|--- 2026-07-02 07:45:43+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702...

CVE-2026-49088

creationtimestamp| type| source ---|---|--- 2026-07-02 07:33:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnjcw7lzb2m 2026-07-02 13:50:27+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6flfadf2t...

CVE-2026-8147 Authorization Bypass in mlflow/mlflow

In MLflow versions prior to 3.14.0, when running with authentication enabled, the trace API endpoints lack proper authorization validators. This allows any authenticated user to bypass experiment-level authorization controls on all trace operations, including reading, deleting, and modifying trac...

CVE-2026-13849

creationtimestamp| type| source ---|---|--- 2026-07-02 07:20:54+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 09:24:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnpjhvbba2o 2026-07-06 07:16:40+00:00| seen|...

CVE-2026-13779

creationtimestamp| type| source ---|---|--- 2026-07-02 07:18:18+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 06:53:46+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706...

CVE-2026-46280

creationtimestamp| type| source ---|---|--- 2026-07-02 06:53:16+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702 2026-07-06 06:22:46+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706...