CVE-2026-45293

creationtimestamp| type| source ---|---|--- 2026-07-30 01:01:13+00:00| seen| https://bsky.app/profile/kitafox.bsky.social/post/3mrtahvnsqn2z 2026-08-18 08:00:03+00:00| seen| Telegram/4XT-JwykIct3xZxWRRH2CZISSgTtNZvfMVYRVt8P8-zCvtWNA 2026-08-18 08:00:03+00:00| seen|...

EUVD-2026-50743

Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...

PT-2026-66493

Name of the Vulnerable Software and Affected Versions Calico affected versions not specified Description The Application Layer Policy, which uses Dikastes to enforce HTTP rules, does not perform URL path normalization. This allows HTTP requests containing repeated slashes, encoded slashes, or...

Linux Distros Unpatched Vulnerability : CVE-2026-17849

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox URL...

CVE-2026-17912: URL Redirection to Untrusted Site

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

PT-2026-66459

Name of the Vulnerable Software and Affected Versions koku-metrics-operator affected versions not specified Description A flaw in the CostManagementMetricsConfig custom resource allows a user with edit permissions to specify an arbitrary upload URL. When the authentication.type is set to token th...

EUVD-2025-210557

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembership.php?id=1...

PT-2026-66543

MaxKB is an open-source AI assistant for enterprise. In versions 2.0.0 through 2.10.4-lts, UpdateStoreTool.update tool passes caller-supplied download url and download callback url values to requests.get without equivalent trusted-host and redirect validation, allowing an authenticated workspace...

PT-2026-66529

DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks. Prior to 1.0.4, is url safe in src/helpers.ts strips the @ userinfo delimiter with remove at symbol in string before new URL parses the URL, allowing an attacker-controlled URL to bypass internal-...

PT-2026-66438

PIA's POST /v1/upload/sbom endpoint accepts a Bearer JWT and checks its unverified iss claim against an issuer allowlist using Python's urlparse before performing OIDC discovery with requests. Because urlparse and requests/urllib3 parse an authority string containing a backslash e.g...

CVE-2026-61526: Improper Neutralization of Input During Web Page Generation

AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. In versions 8.0.0-next.0 through 8.2.0 and 9.0.0 through 9.0.2, the error.message is interpolated into the default HTML exception response without escaping, allowing a crafted missing-route URL to execute...

CVE-2026-12436

creationtimestamp| type| source ---|---|--- 2026-07-29 22:09:29+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrswusxhll2v 2026-07-30 04:46:01+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260730 2026-07-30 14:15:30+00:00| seen|...

pip would incorrectly handle doubly-encoded package URLs from indexes

pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels. This vulnerability requires downloading or installing a package from a malicious package index to succeed, malicious packages alone...

CVE-2026-67431

creationtimestamp| type| source ---|---|--- 2026-07-29 21:21:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsu6t2mfx2q 2026-07-30 16:35:20+00:00| published-proof-of-concept| https://github.com/modelcontextprotocol/ruby-sdk/security/advisories/GHSA-5p9g-j988-pcwv 2026-07-31...

CVE-2026-5487

creationtimestamp| type| source ---|---|--- 2026-07-29 21:04:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsta6necs2q 2026-07-30 05:00:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtnulah2a2l...

CVE-2026-5056

creationtimestamp| type| source ---|---|--- 2026-07-29 20:59:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrssxkpesz2a 2026-07-30 02:01:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtdsrrucq2d...

CVE-2026-67430

creationtimestamp| type| source ---|---|--- 2026-07-29 20:53:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrssmrex5o2o 2026-07-30 16:35:25+00:00| published-proof-of-concept| https://github.com/modelcontextprotocol/ruby-sdk/security/advisories/GHSA-52jp-gj8w-j6xh 2026-07-31...

CVE-2026-63118

creationtimestamp| type| source ---|---|--- 2026-07-29 20:51:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrssjm3jv424 2026-07-30 16:35:30+00:00| published-proof-of-concept| https://github.com/modelcontextprotocol/ruby-sdk/security/advisories/GHSA-rjr6-rcgv-9m7m 2026-07-31...

CVE-2026-4672

creationtimestamp| type| source ---|---|--- 2026-07-29 20:49:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrssgmegbl2i 2026-07-30 04:45:40+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260730 2026-07-30 14:15:31+00:00| seen|...

CVE-2026-5057

creationtimestamp| type| source ---|---|--- 2026-07-29 20:48:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrssdrpgf22a 2026-07-30 02:01:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtdsycxab2o...