CVE-2026-71847

creationtimestamp| type| source ---|---|--- 2026-08-07 20:07:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7igh6tff3f5ib 2026-08-07 20:35:09+00:00| published-proof-of-concept| https://github.com/ruby/json/security/advisories/GHSA-9hj4-r449-hfvc 2026-08-08 01:33:52+00:00| seen|...

GHSA-FWG2-594C-JP42

creationtimestamp| type| source ---|---|--- 2026-08-07 19:36:23+00:00| seen| https://gist.github.com/alon710/81b96826f50cad7313904ff9c7c75f2e...

CVE-2026-71852

creationtimestamp| type| source ---|---|--- 2026-08-07 19:36:23+00:00| seen| https://gist.github.com/alon710/81b96826f50cad7313904ff9c7c75f2e...

CVE-2024-40684

creationtimestamp| type| source ---|---|--- 2026-08-07 19:36:02+00:00| seen| https://bsky.app/profile/vulny-app.bsky.social/post/3msjcipa46424...

CVE-2026-62293

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11, the hidden scan command concatenates attacker-controlled Implementation Guide titles, profile titles, and source references into scan.html without escaping in Scanner.java. As...

CVE-2026-71851

creationtimestamp| type| source ---|---|--- 2026-08-07 19:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msjb5v4unw26 2026-08-07 20:04:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hmgetop3cozq3 2026-08-07 20:35:06+00:00| published-proof-of-concept|...

CVE-2026-71558

creationtimestamp| type| source ---|---|--- 2026-08-07 19:10:14+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msjb2dlrwh2r...

CVE-2026-62836

creationtimestamp| type| source ---|---|--- 2026-08-07 19:06:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msjat6atbm2o 2026-08-07 23:53:29+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117056917271122111 2026-08-11 19:00:41+00:00| seen|...

CVE-2026-15733

creationtimestamp| type| source ---|---|--- 2026-08-07 19:06:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msjat4z4mf2d 2026-08-09 04:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msmpvwtkoa2q 2026-08-13 09:00:08+00:00| confirmed|...

GHSA-MMJ4-63M4-R6H5

creationtimestamp| type| source ---|---|--- 2026-08-07 18:58:46+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3msjag2qwrq25...

crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain

Summary CryptoJS.lib.WordArray.random in affected versions is not a cryptographically secure random number generator. Nominal requests for 128 or 256 bits of entropy produce effective search spaces of approximately 2^39 and 2^47 possibilities — small enough to enumerate on commodity hardware...

CVE-2026-47364

creationtimestamp| type| source ---|---|--- 2026-08-07 18:48:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5iethse5aiie7...

GHSA-P9JM-Q85P-7MCP

creationtimestamp| type| source ---|---|--- 2026-08-07 18:31:18+00:00| seen| https://gist.github.com/alon710/8c320d44f4f97b648e1d03dded62d53e...

CVE-2026-47361

creationtimestamp| type| source ---|---|--- 2026-08-07 18:30:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6ljmigjkgmyjs...

EUVD-2026-44768

jsii-diff: Command Injection via npm: package argument...

CVE-2026-66664

creationtimestamp| type| source ---|---|--- 2026-08-07 18:15:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msj5y2ueqz2w...

CVE-2026-19230 SourceCodester Photo Share Website Comment Input Box ajax.php save_upload cross site scripting

A vulnerability was identified in SourceCodester Photo Share Website 1.0. This affects an unknown part of the file /social/ajax.php?action=saveupload of the component Comment Input Box. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. T...

EUVD-2026-54572

A vulnerability was identified in SourceCodester Photo Share Website 1.0. This affects an unknown part of the file /social/ajax.php?action=saveupload of the component Comment Input Box. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. T...

reverse-engineering-vault

Reverse Engineering Vault Browse the notes directly on GitHub...

CVE-2026-54316

creationtimestamp| type| source ---|---|--- 2026-08-07 17:53:37+00:00| seen| https://bsky.app/profile/securityrss.bsky.social/post/3msj4bxfzpp23 2026-08-08 12:00:31+00:00| seen| https://gist.github.com/dev-krish-xyz/7604ca4e2ca8081e4e1481b4aa8e3585 2026-08-29 21:41:21+00:00| seen|...