CVE-2026-14270

creationtimestamp| type| source ---|---|--- 2026-07-29 14:38:11+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrs5ntfd6j25 2026-07-29 15:01:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrs6wm6hse2d 2026-07-29 15:58:24+00:00| seen|...

CVE-2026-65890

creationtimestamp| type| source ---|---|--- 2026-07-29 14:34:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrs5giyvju2e 2026-07-29 14:59:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrs6ukdypn2q 2026-08-06 08:37:07+00:00| seen|...

CVE-2026-65889

creationtimestamp| type| source ---|---|--- 2026-07-29 14:34:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrs5ghjoz22s 2026-07-29 14:53:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrs6j74a6u2i 2026-08-06 08:07:06+00:00| seen|...

CVE-2026-9177

creationtimestamp| type| source ---|---|--- 2026-07-29 14:32:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrs5cvb4ox2y 2026-07-29 15:03:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrs73bdmgs2i...

CVE-2026-54661

CVE-2026-54661 affects swagger-typescript-api where, prior to 13.12.2, templates/base/http-clients/axios-http-client.ejs interpolates servers[0].url into the HttpClient constructor without escaping. This allows attacker-controlled OpenAPI specs to inject code that executes when new HttpClient() o...

JLSEC-2026-811 A malicious EXR file can trigger undefined behavior in OpenEXR

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From versions 3.0.0 to before 3.2.9, 3.3.0 to before 3.3.11, and 3.4.0 to before 3.4.11, readVariableLengthInteger decodes a variable-length integer fro...

CVE-2026-12703 Bypass of 2FA for Connections via Unattended Access in TeamViewer for macOS

TeamViewer Full Client and Host for macOS before version 15.80 contain a business logic error that can allow an authenticated attacker to bypass a configured 2FA for Connections approval flow via Unattended Access and establish a remote connection to an affected macOS host...

CVE-2026-12703

TeamViewer Full Client and Host for macOS before version 15.80 contain a business logic error that can allow an authenticated attacker to bypass a configured 2FA for Connections approval flow via Unattended Access and establish a remote connection to an affected macOS host...

CVE-2026-12703 Bypass of 2FA for Connections via Unattended Access in TeamViewer for macOS

TeamViewer Full Client and Host for macOS before version 15.80 contain a business logic error that can allow an authenticated attacker to bypass a configured 2FA for Connections approval flow via Unattended Access and establish a remote connection to an affected macOS host...

CVE-2026-12703

CVE-2026-12703 affects TeamViewer Full Client and Host for macOS before 15.80. A business logic error allows an authenticated attacker to bypass the configured 2FA for the Connections approval flow via Unattended Access and establish a remote connection to the macOS host. Impact: remote access wi...

EUVD-2026-50360

TeamViewer Full Client and Host for macOS before version 15.80 contain a business logic error that can allow an authenticated attacker to bypass a configured 2FA for Connections approval flow via Unattended Access and establish a remote connection to an affected macOS host...

CVE-2026-66723

CVE-2026-66723 affects MWDB Core versions 2.2.0 up to but not including 2.19.0. The Vulnerability: Remote Instances proxy API fails to verify authentication for incoming requests, allowing an unauthenticated remote attacker to perform actions on a remote MWDB instance using the API key’s identity...

CVE-2026-66723 Missing authentication requirement in Remote Instances proxy API in MWDB Core

MWDB Core versions =2.2.0 and 2.19.0 contain a missing authorization vulnerability in the Remote Instances proxy API. The proxy API does not verify authentication for incoming requests, allowing an unauthenticated remote attacker to send arbitrary requests to a remote MWDB instance using the...

CVE-2026-66723 Missing authentication requirement in Remote Instances proxy API in MWDB Core

MWDB Core versions =2.2.0 and 2.19.0 contain a missing authorization vulnerability in the Remote Instances proxy API. The proxy API does not verify authentication for incoming requests, allowing an unauthenticated remote attacker to send arbitrary requests to a remote MWDB instance using the...

CVE-2026-66724

MWDB Core versions =2.0.0 and 2.19.0 contain a missing authorization vulnerability in the deprecated config and blob upload endpoints. These endpoints accept the undocumented POST method, which bypasses the capability checks applied to the documented PUT method. This allows any authenticated user...

CVE-2026-66724

MWDB Core versions 2.0.0 to 2.18.x contain a missing authorization vulnerability in deprecated config and blob upload endpoints. The undocumented POST method bypasses capability checks that apply to the documented PUT method, allowing any authenticated user without adding_configs or adding_blobs ...

CVE-2026-18174

creationtimestamp| type| source ---|---|--- 2026-07-29 13:53:47+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mrs36ehrvc2v 2026-07-29 15:32:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsappook623...

CVE-2026-65891

Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor JCE 2.20.2 - Improper input validation in the file rename functionality allowed an authenticated user with file management permissions to rename files t...

CVE-2019-0666

creationtimestamp| type| source ---|---|--- 2026-07-29 12:02:58+00:00| seen| https://t.me/reverseame/1086 2026-07-29 12:02:59+00:00| seen| https://t.me/reverseame/1016 2026-07-30 00:02:48+00:00| seen| https://t.me/reverseame/1086 2026-07-30 00:02:48+00:00| seen| https://t.me/reverseame/1016...

CVE-2022-25155

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:53+00:00| seen| https://t.me/HighLoadChannel/2556 2026-07-29 12:01:53+00:00| seen| https://t.me/HighLoadChannel/2583 2026-07-30 01:01:26+00:00| seen| https://t.me/HighLoadChannel/2583 2026-07-30 01:01:27+00:00| seen|...