CVE-2026-50161

creationtimestamp| type| source ---|---|--- 2026-08-18 20:09:06+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtezhxmms324 2026-08-18 20:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtf3rbgp2z2y...

CVE-2026-16868

creationtimestamp| type| source ---|---|--- 2026-08-18 20:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtezeerdxh2y...

CVE-2026-59086

creationtimestamp| type| source ---|---|--- 2026-08-18 20:03:53+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mtez6mu37n2m...

CVE-2026-50769

creationtimestamp| type| source ---|---|--- 2026-08-18 20:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mteyxuehp324...

CVE-2026-50770

creationtimestamp| type| source ---|---|--- 2026-08-18 20:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mteyxt4mz22f...

CVE-2026-50772

creationtimestamp| type| source ---|---|--- 2026-08-18 19:50:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mteyfxmeo62t...

MINI-7532-MMR7-Q557

Bulletin has no description...

MINI-PQVV-VQXG-252F

Bulletin has no description...

MINI-P4HG-GH5H-7GJ3

Bulletin has no description...

MINI-VG9F-88V6-GR7J

Bulletin has no description...

MINI-VFV6-54PM-W7FF

Bulletin has no description...

CVE-2026-71880

Interpretation of untrusted input in template engine in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to access server-side files and state via template injection...

CVE-2026-50167

Kurrier is a modern, self-hosted workspace for email, calendar, contacts, and storage. Prior to 1.2.4, Kurrier API endpoints for listing and retrieving webhook and identity resources did not enforce ownership checks for authenticated API requests. An attacker with a valid API key could use anothe...

EUVD-2026-61132

MobSF is a mobile application security testing tool used. Prior to 4.5.1, findiconpathzip in mobsf/StaticAnalyzer/views/android/iconanalysis.py uses the Android manifest android:icon value to construct paths under the scan resource directory without rejecting traversal or verifying containment,...

NPM: MagicMirror: ssrf calendar .js

NPM: MagicMirror: ssrf calendar .js vulnerability discovered by ? in WordPress Npm magicmirror versions 2.37.0...

EUVD-2026-61071

MagicMirror² is an open source modular smart mirror platform. Prior to 2.37.0, the ADDCALENDAR handler in defaultmodules/calendar/nodehelper.js accepts an attacker-controlled URL, authentication data, and selfSignedCert setting through the unauthenticated Socket.IO namespace /calendar. The handle...

ROOT-APP-NPM-CVE-2022-37599 CVE-2022-37599 in loader-utils - Patched by Root

Root has patched CVE-2022-37599 in the loader-utils package for Root:npm. Multiple fixed versions available...

CVE-2026-47630

creationtimestamp| type| source ---|---|--- 2026-08-18 17:07:45+00:00| seen| https://infosec.exchange/users/AAKL/statuses/117117607235862161 2026-08-18 19:10:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/65wp6hpbjzwaf...

CVE-2026-47606

creationtimestamp| type| source ---|---|--- 2026-08-18 17:07:45+00:00| seen| https://infosec.exchange/users/AAKL/statuses/117117607235862161 2026-08-18 18:51:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2jo5c23t7guo3...

CVE-2026-47627

creationtimestamp| type| source ---|---|--- 2026-08-18 17:07:45+00:00| seen| https://infosec.exchange/users/AAKL/statuses/117117607235862161 2026-08-18 18:57:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5qawcz7o4rcvl 2026-08-18 20:01:43+00:00| seen|...