CVE-2026-9242

creationtimestamp| type| source ---|---|--- 2026-06-27 10:35:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpbb5ojec62d 2026-06-27 21:16:14+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpcey535fg2m...

CVE-2026-12399

creationtimestamp| type| source ---|---|--- 2026-06-27 10:25:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpbaloxhgt2q 2026-06-27 16:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpbu7ixrta2m...

CVE-2026-11773

creationtimestamp| type| source ---|---|--- 2026-06-27 10:20:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpbadz2g3w27 2026-06-27 19:16:17+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpc6bnt63z2r...

CVE-2026-45259

creationtimestamp| type| source ---|---|--- 2026-06-27 09:57:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpb6zlheep2c...

CVE-2026-13245

creationtimestamp| type| source ---|---|--- 2026-06-27 09:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpb4qipdzr2n...

CVE-2026-9242

The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vulnerable to Authentication Bypass via Insufficient Verification of Data Authenticity in all versions up to and including 6.0.8.6. This is due to the PayPal IPN callback handler...

CVE-2026-13422

creationtimestamp| type| source ---|---|--- 2026-06-27 06:03:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mparxtkgla2b 2026-06-27 10:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpba3raesw2v 2026-06-29 19:26:20+00:00| seen|...

CVE-2026-13331

creationtimestamp| type| source ---|---|--- 2026-06-27 05:58:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mparov4yk72s 2026-06-27 08:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpazf6ojtj2g 2026-06-29 19:22:24+00:00| seen|...

CVE-2026-13136

creationtimestamp| type| source ---|---|--- 2026-06-27 04:44:44+00:00| seen| https://bsky.app/profile/hacker.at.thenote.app/post/3mpanl5wjdk2a 2026-06-30 02:15:18+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mphwmpxdb42x 2026-06-30 14:45:07+00:00| seen|...

CVE-2025-60467

creationtimestamp| type| source ---|---|--- 2026-06-27 03:32:46+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpajkjapgq2v 2026-06-28 02:30:49+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3mpcwkncjr422 2026-06-29 23:49:46+00:00| seen|...

GHSA-72R4-9C5J-MJ57

creationtimestamp| type| source ---|---|--- 2026-06-27 01:42:35+00:00| seen| https://gist.github.com/alon710/8e13d6d37310b61ef33c4ee0f35eeb61...

[SECURITY] Fedora 44 Update: lighttpd-1.4.84-1.fc44

lighttpd pronounced /lighty/ is a secure, fast, compliant, and very flexible web server that has been optimized for high-performance environments. lighttpd uses memory and CPU efficiently and has lower resource use than other popular web servers. Its advanced feature-set FastCGI, CGI, Auth,...

CVE-2026-49336

creationtimestamp| type| source ---|---|--- 2026-06-27 00:35:44+00:00| published-proof-of-concept| https://github.com/microsoft/kiota-typescript/security/advisories/GHSA-396q-4vc8-28x9...

EulerOS 2.0 SP15 : python3 (EulerOS-SA-2026-2466)

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update, |= operator, and unpickli...

EulerOS 2.0 SP15 : python3 (EulerOS-SA-2026-2507)

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update, |= operator, and unpickli...

GHSA-9RC6-8CJV-RCVX Nezha Monitoring: OAuth2 Redirect URL — Host Header Injection

Description The getRedirectURL function in oauth2.go:22-29 constructs the OAuth2 callback URL by concatenating the request's Host header with a fixed path, with zero validation of the Host header: go func getRedirectURLc gin.Context string scheme := "http://" referer := c.Request.Referer if...

ex_aws_sns: Trusted-attacker `SigningCertURL` permits complete SNS signature bypass

Summary ExAws.SNS.verifymessage/1 fetches the signing certificate from the SigningCertURL field of the incoming SNS message without validating that the URL uses HTTPS or that its host is an AWS-owned SNS certificate domain. An unauthenticated attacker who can POST to any endpoint that calls...

GHSA-8JGF-23Q5-X7XX ex_aws_sns: Trusted-attacker `SigningCertURL` permits complete SNS signature bypass

Summary ExAws.SNS.verifymessage/1 fetches the signing certificate from the SigningCertURL field of the incoming SNS message without validating that the URL uses HTTPS or that its host is an AWS-owned SNS certificate domain. An unauthenticated attacker who can POST to any endpoint that calls...

CVE-2026-45807

creationtimestamp| type| source ---|---|--- 2026-06-26 22:45:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7ziubtsx2c 2026-06-27 20:00:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpcarecjsf2g 2026-06-29 14:48:32+00:00| seen|...

CVE-2024-23581

creationtimestamp| type| source ---|---|--- 2026-06-26 22:35:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7ywxayrf2x 2026-06-29 14:40:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgpsovehl2w 2026-06-29 14:40:43+00:00| seen|...