CVE-2026-46678

A flaw was found in Pydantic AI, a Python agent framework for building Generative AI applications. When an application is configured to allow local file downloads from untrusted URLs, a Server-Side Request Forgery SSRF vulnerability exists. This flaw allows an attacker to bypass existing security...

CVE-2026-48449

creationtimestamp| type| source ---|---|--- 2026-07-30 03:52:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrtjzfcgkl2e 2026-07-30 04:00:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtkiggdyr2u 2026-07-30 14:04:22+00:00| seen|...

CVE-2026-51288

creationtimestamp| type| source ---|---|--- 2026-07-30 02:11:09+00:00| seen| https://gist.github.com/programmervuln/3574fa66c73c4354049ced001a3d07a6 2026-07-30 03:05:43+00:00| seen| https://gist.github.com/programmervuln/45be893003233e0a5392b369de70c03f...

CVE-2026-52134

creationtimestamp| type| source ---|---|--- 2026-07-30 01:00:03+00:00| seen| Telegram/8sG8-znVA24HEgCSSOgSFdLJSscjGGd1L2w-JFGPL2oE2E 2026-07-30 01:00:03+00:00| seen| Telegram/Yj7AqxyYiyFjEC7fWRp1WW6CPSPv-8fFQ8YzgEKFCsJSk 2026-07-31 00:00:43+00:00| published-proof-of-concept|...

CVE-2026-67429

creationtimestamp| type| source ---|---|--- 2026-07-29 19:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrsp3jcbsn23 2026-07-29 20:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrsporaviy2l 2026-07-30 16:35:15+00:00|...

CVE-2026-66066

creationtimestamp| type| source ---|---|--- 2026-07-29 16:02:09+00:00| seen| https://bsky.app/profile/tech-trending.bsky.social/post/3mrscdxsbdv25 2026-07-29 16:10:09+00:00| seen| https://bsky.app/profile/hatena-bookmark.bsky.social/post/3mrscsavzuf2k 2026-07-29 18:00:03+00:00| seen|...

CVE-2026-18220

creationtimestamp| type| source ---|---|--- 2026-07-29 15:00:04+00:00| seen| https://t.me/GithubRedTeam/95685 2026-07-29 15:01:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrs6wssb5p2f 2026-07-30 00:00:28+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/95...

CVE-2026-14270

creationtimestamp| type| source ---|---|--- 2026-07-29 14:38:11+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrs5ntfd6j25 2026-07-29 15:01:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrs6wm6hse2d 2026-07-29 15:58:24+00:00| seen|...

CVE-2026-9177

creationtimestamp| type| source ---|---|--- 2026-07-29 14:32:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrs5cvb4ox2y 2026-07-29 15:03:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrs73bdmgs2i...

CVE-2026-18174

creationtimestamp| type| source ---|---|--- 2026-07-29 13:53:47+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mrs36ehrvc2v 2026-07-29 15:32:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsappook623...

CVE-2021-29490

creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:57+00:00| seen| https://t.me/CVEhub/3927 2026-07-29 12:00:57+00:00| seen| https://t.me/CVEhub/4060 2026-07-29 12:00:58+00:00| seen| https://t.me/CVEhub/3440 2026-07-29 12:01:01+00:00| seen| https://t.me/CVEhub/2139 2026-07-29...

CVE-2023-22490

creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:51+00:00| seen| https://t.me/CVEhub/6812 2026-07-29 12:03:19+00:00| seen| https://t.me/sysadminup/1543 2026-07-30 00:01:27+00:00| seen| https://t.me/CVEhub/6812 2026-07-30 00:03:05+00:00| seen| https://t.me/sysadminup/1543 2026-07-31...

CVE-2023-28178

creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:26+00:00| seen| https://t.me/CVEhub/14465 2026-07-29 12:00:26+00:00| seen| https://t.me/CVEhub/14467 2026-07-30 00:00:48+00:00| seen| https://t.me/CVEhub/14465 2026-07-30 01:00:33+00:00| seen| https://t.me/CVEhub/14467 2026-07-31...

CVE-2023-35828

creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:09+00:00| seen| https://t.me/CVEhub/18404 2026-07-29 12:00:10+00:00| seen| https://t.me/CVEhub/18205 2026-07-30 00:00:09+00:00| published-proof-of-concept| https://t.me/CVEhub/18205 2026-07-30 00:00:22+00:00| published-proof-of-concept|...

CVE-2026-58154

creationtimestamp| type| source ---|---|--- 2026-07-29 10:08:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrrokt44tz2r 2026-07-29 11:28:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrrt2y3gqf27 2026-07-30 16:34:04+00:00| seen|...

CVE-2026-33267

creationtimestamp| type| source ---|---|--- 2026-07-29 07:52:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrrgxocsiq2v 2026-07-29 08:15:02+00:00| seen| https://bsky.app/profile/suriq.io/post/3mrriaopnw32v 2026-08-12 19:00:03+00:00| seen| https://t.me/GithubRedTeam/97768...

PT-2026-65890

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 16.6 through 19.0.4 GitLab CE/EE versions 19.1 through 19.1.2 GitLab CE/EE versions 19.2 through 19.2.0 Description A missing authorization check allows an unauthorized user to view project import source information under...

CVE-2026-59689

creationtimestamp| type| source ---|---|--- 2026-07-28 20:15:10+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-software-security-advisory-av26-755 2026-07-28 20:45:12+00:00| seen| https://www.acn.gov.it/portale/w/progress-software-aggiornamenti-di-sicurezza-7 2026-08-13...

CVE-2026-4912

The Media Cleaner: Clean your WordPress! plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 7.0.3. This is due to the geturlsfromhtml function using DOMDocument::loadHTMLFile to fetch iframe source URLs with an insufficient hostname validation...

QTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwarding

Impact The relay's reconnect handler forwards every RECONNECTREQUEST to the host without deduplication or a size cap on the pendingReconnects map, unlike the connect flow which guards against this with maxPendingConnections. An unauthenticated attacker who knows a valid session ID can send...