CVE-2026-7667

creationtimestamp| type| source ---|---|--- 2026-07-17 19:51:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqujlirgex2i 2026-07-18 15:01:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwjtcd3jt2f 2026-07-21 10:07:06+00:00| seen|...

GO-2026-5956 OpenRun: Redirect URL validation bypass using  //host  paths leads to Open Redirect in github.com/openrundev/openrun

OpenRun: Redirect URL validation bypass using //host paths leads to Open Redirect in github.com/openrundev/openrun...

GO-2026-5964 SiYuan: Path Traversal via Double URL Encoding in /assets/*path (publish mode arbitrary file─read), Incomplete fix of CVE-2026-41894 in github.com/siyuan-note/siyuan/kernel

SiYuan: Path Traversal via Double URL Encoding in /assets/path publish mode arbitrary file─read, Incomplete fix of CVE-2026-41894 in github.com/siyuan-note/siyuan/kernel...

CVE-2026-15093

CVE-2026-15093 affects IBM Engineering AI Hub versions 1.0.0, 1.1.0 and 1.2.0. Affected component: handling/validation of user-supplied URLs, enabling a remote attacker to redirect users to malicious websites due to improper URL validation. The IBM Security Bulletin consolidates multiple vulnerab...

CVE-2026-15093

IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to redirect users to malicious websites due to improper validation of user-supplied URLs...

CVE-2026-63101

creationtimestamp| type| source ---|---|--- 2026-07-17 19:23:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquhyemnbm2s 2026-07-19 07:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqy7ggzcb72m...

meta-ads-mcp: Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` Fetch

Server-Side Request Forgery SSRF in uploadadimage via Unrestricted imageurl Fetch Summary The uploadadimage MCP tool in meta-ads-mcp v1.0.113 passes an attacker-controlled imageurl parameter directly to an HTTP fetch helper httpx.AsyncClientfollowredirects=True.geturl without any scheme, host, or...

CVE-2026-9762

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under user control...

CVE-2026-16072

creationtimestamp| type| source ---|---|--- 2026-07-17 18:05:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqudn6gv5x2s...

CVE-2024-23578

creationtimestamp| type| source ---|---|--- 2026-07-17 18:02:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqudic2y6f2i...

CVE-2026-12705

creationtimestamp| type| source ---|---|--- 2026-07-17 17:55:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqud3r4mxv2j 2026-07-28 16:51:30+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-07...

CVE-2024-42214

creationtimestamp| type| source ---|---|--- 2026-07-17 17:45:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqucj4shyl2o...

CVE-2026-9762 IBM® Data Server driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc url is under user control

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under user control...

CVE-2026-9762 IBM® Data Server driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc url is under user control

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under user control...

CVE-2026-12694

creationtimestamp| type| source ---|---|--- 2026-07-17 17:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqub4b72eg2r 2026-07-17 19:13:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquhghiz762q 2026-07-19 10:01:00+00:00| seen|...

CVE-2026-12692

creationtimestamp| type| source ---|---|--- 2026-07-17 17:18:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mquayoq3ib2v 2026-07-17 18:51:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquga3ec2f2s 2026-07-17 19:31:26+00:00| seen|...

CVE-2026-51080

creationtimestamp| type| source ---|---|--- 2026-07-17 17:16:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mquav44jac2z 2026-07-17 17:46:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquclsxilq2x 2026-07-19 11:00:30+00:00| seen|...

EUVD-2026-45202

Open Event Server through 1.19.1 contains a missing authentication vulnerability that allows unauthenticated attackers to export the complete member roster of any group, including email addresses, names, join dates, and roles, by submitting requests to the group followers CSV export endpoint whic...

CVE-2026-63101 Open Event Server 1.19.1 Unauthenticated Member Roster Export via CSV Export Endpoint

Open Event Server through 1.19.1 contains a missing authentication vulnerability that allows unauthenticated attackers to export the complete member roster of any group, including email addresses, names, join dates, and roles, by submitting requests to the group followers CSV export endpoint whic...

CVE-2026-63093

creationtimestamp| type| source ---|---|--- 2026-07-17 15:16:22+00:00| seen| https://bsky.app/profile/suriq.io/post/3mqu272jdvo24 2026-07-17 18:39:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqufkqdbbk2x 2026-07-19 10:01:08+00:00| seen|...