CVE-2026-53340

creationtimestamp| type| source ---|---|--- 2026-07-01 22:26:33+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmkrk2x5l2r...

PYSEC-2026-612

Wagtail is an open source content management system built on Django. In versions prior to 7.0.8, 7.3.3 and 7.4.2, the Documents and Images chooser's chosen endpoint incorrectly listed items for which the user has not been granted choose permission. A user with access to the Wagtail admin could se...

PYSEC-2026-616

Wagtail is an open source content management system built on Django. In versions prior to 7.0.8, 7.3.3 and 7.4.2, reflected cross-site scripting XSS vulnerability exists on the dynamic image URL generator view within the Wagtail admin interface. A user with a limited-permission editor account for...

CVE-2026-54263

Wagtail is an open source content management system built on Django. In versions prior to 7.0.8, 7.3.3 and 7.4.2, reflected cross-site scripting XSS vulnerability exists on the dynamic image URL generator view within the Wagtail admin interface. A user with a limited-permission editor account for...

CVE-2026-53331

creationtimestamp| type| source ---|---|--- 2026-07-01 22:14:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmk46kqmu2u 2026-07-06 06:53:01+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706...

CVE-2026-53326

creationtimestamp| type| source ---|---|--- 2026-07-01 22:13:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmk2syts626 2026-07-05 03:17:35+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpumgpovsp27...

CVE-2026-53329

creationtimestamp| type| source ---|---|--- 2026-07-01 22:13:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmjzhg7sm2d 2026-07-05 03:20:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpummeghfw2f 2026-07-06 06:52:59+00:00| seen|...

Apify Model Context Protocol (MCP) server: Actor MCP path authority injection leaks Apify token

Actor MCP path authority injection leaks Apify token Summary @apify/actors-mcp-server version 0.10.7 builds Actor standby URLs by directly concatenating a trusted base URL with an attacker-controlled webServerMcpPath value taken from an Actor definition returned by the Apify API. An attacker who...

CVE-2026-14117

creationtimestamp| type| source ---|---|--- 2026-07-01 21:51:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmisht6ni2b 2026-07-02 08:17:58+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:46:54+00:00| seen|...

CVE-2026-14112

creationtimestamp| type| source ---|---|--- 2026-07-01 21:48:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmimyys6s2d 2026-07-02 08:17:19+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:46:44+00:00| seen|...

CVE-2026-14110

creationtimestamp| type| source ---|---|--- 2026-07-01 21:47:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmilraejw2y 2026-07-02 01:38:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmvjhl5pn2u 2026-07-02 08:17:09+00:00| seen|...

CVE-2026-14047

creationtimestamp| type| source ---|---|--- 2026-07-01 21:28:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmhjcuqqk2q 2026-07-02 07:50:32+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:23:28+00:00| seen|...

CVE-2026-14043

creationtimestamp| type| source ---|---|--- 2026-07-01 21:27:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmhiox3wl2l 2026-07-02 07:50:24+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-03 06:28:28+00:00| seen|...

CVE-2026-34112

creationtimestamp| type| source ---|---|--- 2026-07-01 21:27:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpmhhxvhug2v 2026-07-02 08:39:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnmzuspge2y...

CVE-2026-14051

creationtimestamp| type| source ---|---|--- 2026-07-01 21:24:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmhc4wxnz2o 2026-07-02 07:50:41+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:23:39+00:00| seen|...

CVE-2026-14055

creationtimestamp| type| source ---|---|--- 2026-07-01 21:21:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmh53m4fm2q 2026-07-02 01:44:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmvtgbjwx2l 2026-07-02 07:50:50+00:00| seen|...

CVE-2026-13998

creationtimestamp| type| source ---|---|--- 2026-07-01 21:20:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmh3pp7pf2t 2026-07-02 07:48:47+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702...

CVE-2026-55660

Tina is a headless content management system. In versions prior to @tinacms/app 2.5.6 and tinacms 3.9.3, cross-origin postMessage handlers and a rich-text URL-sanitization bypass enable stored XSS and session takeover. The library registers window message listeners — the useTina overlay handler,...

CVE-2026-49091

creationtimestamp| type| source ---|---|--- 2026-07-01 21:16:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpmgukqswx2n 2026-07-02 09:25:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnpmdrswj27 2026-07-02 13:50:27+00:00| seen|...

CVE-2026-14013

creationtimestamp| type| source ---|---|--- 2026-07-01 21:15:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmgrvqvtc2u 2026-07-02 07:49:20+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:21:55+00:00| seen|...