CVE-2026-13459

creationtimestamp| type| source ---|---|--- 2026-07-02 22:17:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpp2r4ufnl2d 2026-07-03 03:24:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpplvcmmnk2o...

CVE-2026-12122

creationtimestamp| type| source ---|---|--- 2026-07-02 22:16:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpp2oz6fe227...

CVE-2026-10104

creationtimestamp| type| source ---|---|--- 2026-07-02 22:16:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpp2oayxuz2c 2026-07-06 18:53:05+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/116874542096751750 2026-07-13 22:00:12+00:00| seen|...

CVE-2026-59099

creationtimestamp| type| source ---|---|--- 2026-07-02 22:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpozsoeoil2t 2026-07-03 00:08:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppaxex7xh24 2026-07-03 15:09:49+00:00| seen|...

CVE-2026-58460

creationtimestamp| type| source ---|---|--- 2026-07-02 22:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpozsah7qp2a 2026-07-03 16:55:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqz753emf2w...

CVE-2026-57679

creationtimestamp| type| source ---|---|--- 2026-07-02 21:46:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpoyy457if2r 2026-07-03 00:35:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppchwjyrl2b 2026-07-03 00:36:00+00:00| seen|...

CVE-2026-57621

creationtimestamp| type| source ---|---|--- 2026-07-02 21:44:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpoyuisubn2x...

CVE-2026-57625

creationtimestamp| type| source ---|---|--- 2026-07-02 21:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpoynecpag2u 2026-08-01 13:44:36+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrzm2rlfad27...

CVE-2026-57623

creationtimestamp| type| source ---|---|--- 2026-07-02 21:36:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpoyg7qwqu2c 2026-07-31 09:44:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrwo5t2kbf2w...

CVE-2026-9563

creationtimestamp| type| source ---|---|--- 2026-07-02 21:08:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpowvb7xwa2m 2026-07-03 08:59:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq6mueyys26 2026-07-08 15:15:04+00:00| seen|...

MAL-2026-6789 Malicious code in @checkrhq/adjudication-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c52d9987ace09f0c48d8b0661bd1fcd3cf4e7e701b5e515810c7f32d99086cf package.json declares a preinstall lifecycle script that runs curl to POST installer reconnaissance data — hostname, current user whoami, working...

Algernon vulnerable to server-side script source disclosure on Windows via NTFS filename

Summary Algernon selects its file handler from filepath.Ext engine/handlers.go:134, which does not treat the NTFS-equivalent names x.lua::$DATA, x.lua., or x.lua as .lua. On Windows, an unauthenticated client appends one of these suffixes to any server-side script on a public path and receives it...

GHSA-MM6C-5J6X-HQ8M Algernon vulnerable to server-side script source disclosure on Windows via NTFS filename

Summary Algernon selects its file handler from filepath.Ext engine/handlers.go:134, which does not treat the NTFS-equivalent names x.lua::$DATA, x.lua., or x.lua as .lua. On Windows, an unauthenticated client appends one of these suffixes to any server-side script on a public path and receives it...

CVE-2026-7311

creationtimestamp| type| source ---|---|--- 2026-07-02 20:16:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpotyblujl2q 2026-07-02 22:03:09+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpozwmi2ca2g 2026-07-03 12:16:06+00:00| seen|...

CVE-2026-5348

creationtimestamp| type| source ---|---|--- 2026-07-02 20:07:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoth3xfxh2o...

CVE-2026-58465

creationtimestamp| type| source ---|---|--- 2026-07-02 19:50:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mposkbdi6n2z 2026-07-02 22:01:24+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpoztjb2lr27 2026-07-03 12:15:44+00:00| seen|...

CVE-2026-28322

creationtimestamp| type| source ---|---|--- 2026-07-02 19:37:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mporrnzimn22...

Security Bulletin: Parameter Injection Vulnerability in API Graph Execution Engine

Summary A parameter injection vulnerability existed in the API Graph Execution Engine's tweaks processing mechanism. The vulnerability allowed authenticated attackers to bypass security controls and inject malicious parameters into flow components at runtime. An attacker with valid API credential...

CVE-2026-55950

creationtimestamp| type| source ---|---|--- 2026-07-02 19:30:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mporghjrir27 2026-07-03 09:41:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqaxqaleg2u 2026-07-03 10:37:35+00:00| seen|...

Security Bulletin: Remote Code Execution in CUGA Component CodeAgent

Summary An authenticated user could execute arbitrary commands on the server when the CUGA component is installed and a flow using CUGA's CodeAgent is created and executed. The vulnerability exists in the CodeAgent's Python code execution path, which permits object graph introspection to recover...