CVE-2026-68580

creationtimestamp| type| source ---|---|--- 2026-08-02 14:01:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms45imklnk2n 2026-08-02 14:14:32+00:00| seen| https://bsky.app/profile/potato.software/post/3ms4675yian23 2026-08-03 04:44:06+00:00| seen|...

Exploit for CVE-2026-9809

CVE-2026-9809 CVE-2026-9809 is a Stored Cross-Site Scripting...

CVE-2026-68581 Vikunja 0.22.0 through 2.3.0 Authentication Bypass via Principal ID Collision

Vikunja versions 0.22.0 through 2.3.0 fail to validate the principal type in API token management. Because user IDs and link-share IDs are independent numeric sequences and both resolve through a generic web.Auth.GetID interface, a link-share JWT whose numeric ID equals a target user's ID is...

CVE-2026-68581 Vikunja 0.22.0 through 2.3.0 Authentication Bypass via Principal ID Collision

Vikunja versions 0.22.0 through 2.3.0 fail to validate the principal type in API token management. Because user IDs and link-share IDs are independent numeric sequences and both resolve through a generic web.Auth.GetID interface, a link-share JWT whose numeric ID equals a target user's ID is...

CVE-2026-15241

creationtimestamp| type| source ---|---|--- 2026-08-02 11:54:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms3wee2wlp2d 2026-08-02 11:54:16+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3ms3wefzg7b25...

CVE-2026-16285

creationtimestamp| type| source ---|---|--- 2026-08-02 10:11:33+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3ms3qmqfmgv2k 2026-08-02 10:58:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms3ta673ib2m...

EUVD-2026-51984

The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ exadinfoboximage’ parameter in all versions up to, and including, 2.7.9.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

MINI-V3VM-4RG2-VPRV

Bulletin has no description...

CVE-2026-16285

The Product Attachment for WooCommerce WordPress plugin before 2.3.3 does not perform any authorization check before streaming media library files, allowing unauthenticated users to download any attachment — including private or unlinked uploads — by enumerating its numeric ID...

OpenAnt — Updated!

OpenAnt OpenAnt from Knostic is an open source LLM-based vulnerability discovery product that helps defenders proactively find verified security flaws while minimizing both false positives and false negatives. Stage 1 detects. Stage 2 attacks. What survives is real. We're pretty proud of this...

CVE-2026-18571

CVE-2026-18571 affects Keycloak’s user creation flow when Fine-Grained Admin Permissions V2 (FGAP V2) is enabled. The flaw lets a sub-administrator with permission to create users add those users to any group, including groups the administrator isn’t authorized to manage, potentially enabling una...

CVE-2026-18571

A flaw was found in the user creation component of Keycloak when Fine-Grained Admin Permissions V2 FGAP V2 is enabled. This issue allows a sub-administrator with permission to create users to add those users to any group, even groups the sub-administrator is not authorized to manage. This could...

PT-2026-67334

Name of the Vulnerable Software and Affected Versions Vikunja versions 0.22.0 through 2.3.0 Description Failure to validate the principal type in API token management allows an authenticated attacker to impersonate other users. User IDs and link-share IDs are independent numeric sequences that bo...

AlmaLinux 8 : perl:5.32 (ALSA-2026:48225)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:48225 advisory. perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size CVE-2026-9538 Tenable has extracted the preceding description...

php:8.2 security, bug fix, and enhancement update

libzip php 8.2.32-1 - rebase to 8.2.32 php-pear php-pecl-apcu php-pecl-rrd php-pecl-xdebug3 php-pecl-zip...

CVE-2026-67308

creationtimestamp| type| source ---|---|--- 2026-08-01 21:00:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2egyp24c2b 2026-08-01 21:27:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117022368056209142 2026-08-02 12:28:05+00:00| seen|...

CVE-2026-67324

creationtimestamp| type| source ---|---|--- 2026-08-01 20:16:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms2bwsslzq22 2026-08-01 21:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2eglt7fr2t 2026-08-01 22:22:01+00:00| seen|...

CVE-2026-15662

creationtimestamp| type| source ---|---|--- 2026-08-01 18:07:22+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3ms22qnm6fx23 2026-08-01 18:07:23+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms22qnnq5d2z 2026-08-01 18:34:30+00:00| seen|...

CVE-2026-15950

creationtimestamp| type| source ---|---|--- 2026-08-01 17:39:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzz63hfnh2d 2026-08-01 17:39:18+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mrzz6gz75r2n 2026-08-01 18:39:00+00:00| seen|...

CVE-2026-16614

creationtimestamp| type| source ---|---|--- 2026-08-01 17:35:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzyxryvnf2i 2026-08-01 17:36:07+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzyyqr2ya22 2026-08-01 19:00:39+00:00| seen|...