CVE-2024-40842

creationtimestamp| type| source ---|---|--- 2026-07-30 07:43:34+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3mrtwxdov3525...

CVE-2026-64635

CVE-2026-64635 affects Veeam Service Provider Console. An improper handling of the returnUrl parameter in Forgot Password enables an unauthenticated attacker to hijack the password-reset link domain, causing the reset code to be sent to an attacker-controlled host and potentially take over the us...

CVE-2026-1360

creationtimestamp| type| source ---|---|--- 2026-07-30 06:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtr7gmx3j2c...

CVE-2026-51297

creationtimestamp| type| source ---|---|--- 2026-07-30 05:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrtpv7h7o42c...

CVE-2026-17782

Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-45293

creationtimestamp| type| source ---|---|--- 2026-07-30 01:01:13+00:00| seen| https://bsky.app/profile/kitafox.bsky.social/post/3mrtahvnsqn2z 2026-08-18 08:00:03+00:00| seen| Telegram/4XT-JwykIct3xZxWRRH2CZISSgTtNZvfMVYRVt8P8-zCvtWNA 2026-08-18 08:00:03+00:00| seen|...

EUVD-2026-50743

Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...

Linux Distros Unpatched Vulnerability : CVE-2026-17849

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox URL...

PT-2026-66459

Name of the Vulnerable Software and Affected Versions koku-metrics-operator affected versions not specified Description A flaw in the CostManagementMetricsConfig custom resource allows a user with edit permissions to specify an arbitrary upload URL. When the authentication.type is set to token th...

EUVD-2025-210557

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembership.php?id=1...

CVE-2026-12436

creationtimestamp| type| source ---|---|--- 2026-07-29 22:09:29+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrswusxhll2v 2026-07-30 04:46:01+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260730 2026-07-30 14:15:30+00:00| seen|...

CVE-2026-67431

creationtimestamp| type| source ---|---|--- 2026-07-29 21:21:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsu6t2mfx2q 2026-07-30 16:35:20+00:00| published-proof-of-concept| https://github.com/modelcontextprotocol/ruby-sdk/security/advisories/GHSA-5p9g-j988-pcwv 2026-07-31...

CVE-2026-5487

creationtimestamp| type| source ---|---|--- 2026-07-29 21:04:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsta6necs2q 2026-07-30 05:00:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtnulah2a2l...

CVE-2026-5056

creationtimestamp| type| source ---|---|--- 2026-07-29 20:59:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrssxkpesz2a 2026-07-30 02:01:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtdsrrucq2d...

CVE-2026-67430

creationtimestamp| type| source ---|---|--- 2026-07-29 20:53:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrssmrex5o2o 2026-07-30 16:35:25+00:00| published-proof-of-concept| https://github.com/modelcontextprotocol/ruby-sdk/security/advisories/GHSA-52jp-gj8w-j6xh 2026-07-31...

CVE-2026-63118

creationtimestamp| type| source ---|---|--- 2026-07-29 20:51:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrssjm3jv424 2026-07-30 16:35:30+00:00| published-proof-of-concept| https://github.com/modelcontextprotocol/ruby-sdk/security/advisories/GHSA-rjr6-rcgv-9m7m 2026-07-31...

CVE-2026-4672

creationtimestamp| type| source ---|---|--- 2026-07-29 20:49:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrssgmegbl2i 2026-07-30 04:45:40+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260730 2026-07-30 14:15:31+00:00| seen|...

CVE-2026-5057

creationtimestamp| type| source ---|---|--- 2026-07-29 20:48:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrssdrpgf22a 2026-07-30 02:01:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtdsycxab2o...

CVE-2026-3093

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an attacker to execute arbitrary JavaScript in another user's browser via a crafted URL, due to improper...

CVE-2026-67436

CVE-2026-67436 affects Linuxfabrik monitoring-plugins (6.0.0 and earlier), specifically the redfish-* plugins. The root cause is that these plugins build request URLs by concatenating an operator-supplied base URL with response-supplied @odata.id links, enabling a malicious or compromised BMC to ...