CVE-2026-15733

creationtimestamp| type| source ---|---|--- 2026-08-07 19:06:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msjat4z4mf2d 2026-08-09 04:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msmpvwtkoa2q 2026-08-13 09:00:08+00:00| confirmed|...

GHSA-MMJ4-63M4-R6H5

creationtimestamp| type| source ---|---|--- 2026-08-07 18:58:46+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3msjag2qwrq25...

crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain

Summary CryptoJS.lib.WordArray.random in affected versions is not a cryptographically secure random number generator. Nominal requests for 128 or 256 bits of entropy produce effective search spaces of approximately 2^39 and 2^47 possibilities — small enough to enumerate on commodity hardware...

CVE-2026-47364

creationtimestamp| type| source ---|---|--- 2026-08-07 18:48:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5iethse5aiie7...

GHSA-P9JM-Q85P-7MCP

creationtimestamp| type| source ---|---|--- 2026-08-07 18:31:18+00:00| seen| https://gist.github.com/alon710/8c320d44f4f97b648e1d03dded62d53e...

CVE-2026-47361

creationtimestamp| type| source ---|---|--- 2026-08-07 18:30:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6ljmigjkgmyjs...

EUVD-2026-44768

jsii-diff: Command Injection via npm: package argument...

CVE-2026-66664

creationtimestamp| type| source ---|---|--- 2026-08-07 18:15:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msj5y2ueqz2w...

EUVD-2026-54572

A vulnerability was identified in SourceCodester Photo Share Website 1.0. This affects an unknown part of the file /social/ajax.php?action=saveupload of the component Comment Input Box. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. T...

CVE-2026-54316

creationtimestamp| type| source ---|---|--- 2026-08-07 17:53:37+00:00| seen| https://bsky.app/profile/securityrss.bsky.social/post/3msj4bxfzpp23 2026-08-08 12:00:31+00:00| seen| https://gist.github.com/dev-krish-xyz/7604ca4e2ca8081e4e1481b4aa8e3585 2026-08-29 21:41:21+00:00| seen|...

CVE-2026-20337

creationtimestamp| type| source ---|---|--- 2026-08-07 17:50:55+00:00| seen| https://infosec.exchange/users/AAKL/statuses/117055491493877536 2026-08-08 14:02:58+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mslae2k27x2n 2026-08-08 14:03:05+00:00| seen|...

CVE-2026-20339

creationtimestamp| type| source ---|---|--- 2026-08-07 17:50:55+00:00| seen| https://infosec.exchange/users/AAKL/statuses/117055491493877536 2026-08-08 11:02:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mskw66h3xi2h 2026-08-08 18:09:47+00:00| seen|...

GHSA-9RJG-X2P2-H68H

creationtimestamp| type| source ---|---|--- 2026-08-07 17:31:49+00:00| seen| https://gist.github.com/alon710/78794a04f6eb67dcf53fb32270be19e1...

CVE-2026-66711

creationtimestamp| type| source ---|---|--- 2026-08-07 17:15:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msj2mshy3p2w...

GHSA-WVPP-8HX9-P66J

creationtimestamp| type| source ---|---|--- 2026-08-07 16:40:33+00:00| seen| https://gist.github.com/alon710/7b081fe119ed64f00c308eff03c67cc3...

CVE-2026-62996

creationtimestamp| type| source ---|---|--- 2026-08-07 16:35:38+00:00| published-proof-of-concept| https://github.com/smarty-php/smarty/security/advisories/GHSA-rjhh-76wf-8xmw...

CVE-2026-28145

creationtimestamp| type| source ---|---|--- 2026-08-07 16:15:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msixbjsnbw2i...

CVE-2024-24210

creationtimestamp| type| source ---|---|--- 2026-08-07 16:02:15+00:00| seen| Telegram/f4Vytjn-MRLHBVgNi9AN52s9pui8b8Txh36DWLXfR9Gx-I 2026-08-08 00:04:27+00:00| seen| Telegram/f4Vytjn-MRLHBVgNi9AN52s9pui8b8Txh36DWLXfR9Gx-I...

GHSA-WG23-69C2-GJC8

creationtimestamp| type| source ---|---|--- 2026-08-07 15:31:58+00:00| seen| https://gist.github.com/alon710/1c07f05a9611684f7f4ae2d0d6c93c3e...

CVE-2026-19264

Postiz is an open-source social media scheduling tool. The route that serves locally stored media joins URL-supplied path segments onto the upload directory and streams the file without normalising the path or confining it to that directory, and the route requires no authentication. Raw...