CVE-2026-57233

creationtimestamp| type| source ---|---|--- 2026-07-15 02:28:34+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mqnoeb25ov2m 2026-07-17 16:15:03+00:00| seen|...

CVE-2026-42049

creationtimestamp| type| source ---|---|--- 2026-07-15 02:13:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnnimr6di26...

CVE-2026-15764

creationtimestamp| type| source ---|---|--- 2026-07-15 01:46:27+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mqnlyxa5oo25 2026-07-16 04:45:07+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260716 2026-07-16 23:03:15+00:00|...

io.github.skylot:jadx-core (>=1.5.2, <=1.5.5), io.github.skylot:jadx-java-input (>=1.5.2, <=1.5.5) +5 more potentially affected by CVE-2026-54684 via io.github.skylot:jadx-zip (>=1.5.2, <=1.5.5)

io.github.skylot:jadx-zip MAVEN version =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.5 Source cves: CVE-2026-54684 Source advisory: SNYK:JAVA-IOGITHUBSKYLOT-17980835...

CVE-2025-56363

creationtimestamp| type| source ---|---|--- 2026-07-15 00:39:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnib3yvv62x 2026-07-27 08:53:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmjhj4bhp2a...

CVE-2026-57456

creationtimestamp| type| source ---|---|--- 2026-07-15 00:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqni4xo2jk2k...

Exploit for CVE-2026-55511

CVE-2026-55511 PoC Non-weaponized proof of concept for a Yamc...

CVE-2026-15751

creationtimestamp| type| source ---|---|--- 2026-07-15 00:20:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnh6iiwsk2l 2026-07-27 09:03:41+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrmjztw76g25 2026-07-27 09:03:41+00:00| seen|...

CVE-2026-15753

creationtimestamp| type| source ---|---|--- 2026-07-15 00:12:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqngrs4sbc2g 2026-07-27 09:09:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmkdsf2qy27...

CVE-2026-15752

creationtimestamp| type| source ---|---|--- 2026-07-15 00:09:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqngmfzazt24 2026-07-27 08:46:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmj3u7hwj23 2026-07-27 08:47:41+00:00| seen|...

CVE-2026-5270

creationtimestamp| type| source ---|---|--- 2026-07-15 00:04:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqngczzwyz2x 2026-07-15 13:38:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqotriltvq2p 2026-07-27 09:08:14+00:00| seen|...

CVE-2025-56364

creationtimestamp| type| source ---|---|--- 2026-07-15 00:00:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqng325btt2z 2026-07-27 08:48:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmj6r7uog2m 2026-07-27 08:53:06+00:00| seen|...

CVE-2025-65720: Improper Neutralization of Special Elements used in a Command

An issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user interaction with a crafted HTML page...

CVE-2026-61433: Improper Control of Generation of Code

PraisonAI before 4.6.78 fails to safely encode deployment configuration values when generating Python source code for API servers. Attackers can inject arbitrary Python expressions through the deploy.api.host and agentsfile configuration parameters that execute when the generated server starts or...

CVE-2025-65720

An issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user interaction with a crafted HTML page...

CVE-2025-65720

A critical command injection vulnerability in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system. The root cause is a "by design" weakness in the Model Context Protocol (MCP) architecture, specifically involving unsafe defaults in how configuration...

PT-2026-60387

Name of the Vulnerable Software and Affected Versions OpenFeature Operator versions prior to 0.9.3 Description On multi-tenant clusters using namespaces as trust boundaries, a tenant capable of creating a controller-owned workload can reference a FeatureFlagSource or InProcessConfiguration in a...

CVE-2025-65720

An issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user interaction with a crafted HTML page...

PT-2026-60116

n8n before 2.19.3 contains a file path restriction bypass in the legacy ExecuteWorkflow node's localFile source option, which reads workflow files from disk without the file-access checks enforced by other file-reading nodes. Although hidden from the UI since v1.2, it remains reachable via the RE...

CVE-2026-15895: Improper Neutralization of Special Elements used in an OS Command

OS command injection in the npm package loading component in AWS jsii-diff before 1.131.0 might allow context-dependent attackers to execute arbitrary commands via crafted package specifiers passed to the npm: source argument. To mitigate this issue, users should upgrade to jsii-diff v1.131.0 or...