CVE-2026-17347

creationtimestamp| type| source ---|---|--- 2026-07-31 17:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrxgl4s7yf2a 2026-08-01 09:52:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrz73zqg4s2m 2026-08-01 09:53:08+00:00| seen|...

CVE-2026-18141

creationtimestamp| type| source ---|---|--- 2026-07-31 17:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrxgkpctbz2n...

CVE-2026-18141 Aap-gateway: aap-gateway: authentication bypass in event-driven ansible via forged http header

A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible EDA. An unauthenticated remote attacker can bypass mutual Transport Layer Security mTLS authentication for event streams. This is achieved by manipulating the event stream URL and forging the HTTP...

CVE-2026-67350

Serendipity before 2.6.1 contains an open redirect vulnerability in exit.php that allows unauthenticated attackers to redirect users to arbitrary external sites by supplying a malicious Base64-encoded url parameter when the Track Exits plugin is configured with commentredirection set to s9y...

CVE-2026-18446

fast-uri before 4.1.2, 3.1.5, and 2.4.4 requires a literal double forward slash to recognize a URI authority, so a reference that uses a backslash based introducer in place of it backslash backslash, forward slash backslash, or backslash forward slash is parsed with no authority and folds into th...

CVE-2026-18446 fast-uri vulnerable to host confusion via backslash authority introducer

fast-uri before 4.1.2, 3.1.5, and 2.4.4 requires a literal double forward slash to recognize a URI authority, so a reference that uses a backslash based introducer in place of it backslash backslash, forward slash backslash, or backslash forward slash is parsed with no authority and folds into th...

CVE-2026-67350

Serendipity

CVE-2026-67350

Serendipity before 2.6.1 contains an open redirect vulnerability in exit.php that allows unauthenticated attackers to redirect users to arbitrary external sites by supplying a malicious Base64-encoded url parameter when the Track Exits plugin is configured with commentredirection set to s9y...

CVE-2025-67649

creationtimestamp| type| source ---|---|--- 2026-07-31 12:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrwykdmmt52v 2026-07-31 16:45:06+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2025-67649 2026-08-01 11:39:40+00:00| seen|...

CVE-2026-14537

creationtimestamp| type| source ---|---|--- 2026-07-31 12:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrwyd6ujnv2v...

CVE-2026-38709

creationtimestamp| type| source ---|---|--- 2026-07-31 12:32:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrwxk74bif2v...

CVE-2026-46594 Reflected XSS in PHP Poll Script

A reflected cross-site scripting XSS vulnerability has been identified in the PHP Jabbers - PHP Poll Script. A malicious attacker can craft a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's browser. This issue was fixed in version 4.1...

CVE-2026-46594

A reflected XSS vulnerability affects the PHP Jabbers - PHP Poll Script. A crafted URL can trigger arbitrary JavaScript execution in the victim’s browser. The issue is resolved in version 4.1; upgrading to 4.1 or later is recommended. The available documents do not provide exploitation status, sp...

CVE-2026-46594 Reflected XSS in PHP Poll Script

A reflected cross-site scripting XSS vulnerability has been identified in the PHP Jabbers - PHP Poll Script. A malicious attacker can craft a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's browser. This issue was fixed in version 4.1...

CVE-2026-64804

creationtimestamp| type| source ---|---|--- 2026-07-31 11:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrwuhubrry2v...

CVE-2026-62391

creationtimestamp| type| source ---|---|--- 2026-07-31 11:36:23+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/65sh4aa55lke2 2026-09-02 12:05:14+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mujvgkhxfs2j...

vulnerabilities are hidden in JFrog Artifactory

JFrog has addressed several vulnerabilities in JFrog Artifactory. The vulnerabilities concern various components of JFrog Artifactory. - There is a possibility of privilege escalation, as the system does not control the scope of tokens, allowing attackers to elevate their privileges. - Users with...

CVE-2026-16236

creationtimestamp| type| source ---|---|--- 2026-07-31 08:07:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/73yfkyntgsmwp 2026-07-31 23:02:35+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mry2rlharq2i...

GHSA-RJR6-RCGV-9M7M

creationtimestamp| type| source ---|---|--- 2026-07-31 07:31:41+00:00| seen| https://gist.github.com/alon710/f097a8ec4fd3160f0611d4f0d84400e7...

CVE-2026-62416

creationtimestamp| type| source ---|---|--- 2026-07-31 04:45:40+00:00| seen| https://jvn.jp/en/vu/JVNVU92540957 2026-08-03 10:10:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3myb6nvixzxk7...