CVE-2026-53500

Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, the ALLOWEDSOURCES configuration passes plain strings to re.match without escaping dots, so a hostname differing at dot positions can match the allowlist. This issue is fixed in 7.8.0...

CVE-2026-54737

creationtimestamp| type| source ---|---|--- 2026-07-31 18:32:14+00:00| seen| https://gist.github.com/alon710/3afa9bbe175e1dfd1649cd2081ad6eb5...

CVE-2026-34490

creationtimestamp| type| source ---|---|--- 2026-07-31 18:14:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/b3ngk6uz6mptu...

CVE-2026-58047

creationtimestamp| type| source ---|---|--- 2026-07-31 18:06:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/23v3iiu47byar 2026-08-04 16:07:10+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3msbfge7k4v24 2026-08-04 16:15:25+00:00| seen|...

GHSA-5846-7QM3-R52J

creationtimestamp| type| source ---|---|--- 2026-07-31 17:31:37+00:00| seen| https://gist.github.com/alon710/3725c6658b9e4e7f9bed06e9ce214b76...

CVE-2025-67650

creationtimestamp| type| source ---|---|--- 2026-07-31 17:15:03+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2025-67649...

CVE-2026-12942

creationtimestamp| type| source ---|---|--- 2026-07-31 17:06:30+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrxguvdzja2v...

CVE-2026-17059

creationtimestamp| type| source ---|---|--- 2026-07-31 17:04:16+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3mrxgquksow2h...

CVE-2026-52855

creationtimestamp| type| source ---|---|--- 2026-07-31 17:04:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxgqloluu2j 2026-07-31 17:54:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2cyzi3feyud55 2026-07-31 19:49:55+00:00| seen|...

CVE-2026-17349

creationtimestamp| type| source ---|---|--- 2026-07-31 17:02:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxgmxn3vz2s 2026-08-01 09:38:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrz6clkjkg24 2026-08-01 09:38:47+00:00| seen|...

CVE-2026-17347

creationtimestamp| type| source ---|---|--- 2026-07-31 17:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrxgl4s7yf2a 2026-08-01 09:52:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrz73zqg4s2m 2026-08-01 09:53:08+00:00| seen|...

CVE-2026-18141

creationtimestamp| type| source ---|---|--- 2026-07-31 17:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrxgkpctbz2n...

CVE-2026-14919

creationtimestamp| type| source ---|---|--- 2026-07-31 17:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxgjgetfu2a...

CVE-2026-18446

creationtimestamp| type| source ---|---|--- 2026-07-31 16:58:30+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrxggkrye42v 2026-08-02 09:00:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms3mmrwppv2n...

CVE-2026-10685

creationtimestamp| type| source ---|---|--- 2026-07-31 16:56:34+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrxgd47rmf22 2026-08-02 08:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms3jckm6or2x...

CVE-2025-69937

creationtimestamp| type| source ---|---|--- 2026-07-31 16:56:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxgcad7e52v...

CVE-2026-10064

creationtimestamp| type| source ---|---|--- 2026-07-31 16:53:02+00:00| seen| https://bsky.app/profile/vulny-app.bsky.social/post/3mrxg4s54re2q...

CVE-2026-46594

creationtimestamp| type| source ---|---|--- 2026-07-31 16:45:11+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2025-67649...

GHSA-XRMJ-5G4G-8987

creationtimestamp| type| source ---|---|--- 2026-07-31 16:33:01+00:00| seen| https://gist.github.com/alon710/e1fe3e68fe3d799c84bb3e82e35d7e46...

CVE-2025-69938

creationtimestamp| type| source ---|---|--- 2026-07-31 15:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxcmapwft2y...