CVE-2026-61437

creationtimestamp| type| source ---|---|--- 2026-07-10 16:42:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqclqmets62x 2026-07-10 20:16:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcxopggxy27 2026-07-10 23:31:15+00:00| seen|...

CVE-2026-61456

creationtimestamp| type| source ---|---|--- 2026-07-10 16:37:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqclhnwrcu2e 2026-07-10 20:20:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcxwefthh2a 2026-07-10 22:19:19+00:00| seen|...

CVE-2026-61441

creationtimestamp| type| source ---|---|--- 2026-07-10 16:32:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcl6piort2i 2026-07-10 22:21:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd6omq2ei26 2026-07-10 23:26:14+00:00| seen|...

CVE-2026-61432

creationtimestamp| type| source ---|---|--- 2026-07-10 16:28:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqckwzwntr2k 2026-07-10 20:15:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcxneg5ju2i 2026-07-10 23:29:45+00:00| seen|...

CVE-2026-58493

CVE-2026-58493 affects grav-plugin-database (Grav CMS) prior to 1.2.0. The plugin builds PDO DSN strings by concatenating user-configurable YAML values (host, dbname, charset, server, database, directory, filename) without sanitization, enabling an administrator with plugin config access to injec...

CVE-2026-58493 grav-plugin-database: DSN Parameter Injection via Unsanitized Configuration Values in Connection String Construction

grav-plugin-database is the database plugin for Grav CMS. Prior to 1.2.0, Database::call builds PDO DSN strings by directly concatenating user-configurable YAML values from fields such as host, dbname, charset, server, database, directory, and filename without sanitization or validation, allowing...

CVE-2026-60086

creationtimestamp| type| source ---|---|--- 2026-07-10 16:24:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqckqcwydo2z 2026-07-10 20:23:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcy3aa7mh22...

CVE-2026-61492

creationtimestamp| type| source ---|---|--- 2026-07-10 16:18:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqckeuxhu526 2026-07-10 20:21:02+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcxxf2ixm2d 2026-07-10 22:29:17+00:00| seen|...

CVE-2026-46340

creationtimestamp| type| source ---|---|--- 2026-07-10 16:17:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqckepga3q2a...

Malicious code in theta-sdk-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6967c021e95228b33b18be4489fea5d404720cbd21beb53dac8bf7ea4f4d54d1 [email protected] ships src/decrypt.js and src/providers/BaseProvider.js which together implement a hidden execution channel. On module load,...

CVE-2026-59796

creationtimestamp| type| source ---|---|--- 2026-07-10 16:12:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqck3iudxm2x 2026-07-10 20:22:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcy2mf6472z 2026-07-12 06:00:48+00:00| seen|...

CVE-2026-60091

creationtimestamp| type| source ---|---|--- 2026-07-10 16:06:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcjpwr6kh2q 2026-07-10 20:15:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcxmqnilo2c 2026-07-15 16:35:50+00:00| seen|...

CVE-2026-61455

creationtimestamp| type| source ---|---|--- 2026-07-10 16:04:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcjml5p5g2q 2026-07-10 20:20:02+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcxvm3lsn26 2026-07-10 20:20:06+00:00| seen|...

CVE-2026-59794

creationtimestamp| type| source ---|---|--- 2026-07-10 16:02:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcjjfupjv2g 2026-07-10 20:22:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcxzunjmo2e 2026-07-11 00:29:20+00:00| seen|...

CVE-2026-48043

creationtimestamp| type| source ---|---|--- 2026-07-10 15:58:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcjc5vizd2e...

GHSA-PJHX-3C3W-9V23

creationtimestamp| type| source ---|---|--- 2026-07-10 15:41:54+00:00| seen| https://gist.github.com/alon710/a56efdb02fd3817ca2ff1035bbcd74e4...

CVE-2026-54469

creationtimestamp| type| source ---|---|--- 2026-07-10 15:30:16+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116896393517811948 2026-07-10 17:27:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcoasxcp327 2026-07-10 21:24:23+00:00| seen|...

CVE-2026-59792

creationtimestamp| type| source ---|---|--- 2026-07-10 15:16:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqcgw3rsma2f 2026-07-10 20:17:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcxqwt2442e 2026-07-11 00:32:28+00:00| seen|...

GHSA-4VJ7-5MJ6-JM8M

creationtimestamp| type| source ---|---|--- 2026-07-10 15:11:59+00:00| seen| https://gist.github.com/alon710/6a1f370c6283107f299350100ca84db2...

EUVD-2026-42924

MaxKB is an open-source AI assistant for enterprise. Prior to 2.10.0-lts, MaxKB tool import functionality in apps/tools/serializers/tool.py and MCP referencing mode in apps/application/chatpipeline/step/chatstep/impl/basechatstep.py do not consistently validate MCP transport type, allowing an...