{"metadata": {"vulnerability": "cve-2026-90519", "count": 16, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-09-12T00:00:00Z", "date_only": false, "value": "2026-09-12T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "cve-2026-90519", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-09-12T02:00:00Z", "date_only": false, "value": "2026-09-12T02:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "cve-2026-90519", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-09-12T09:31:40.174Z", "date_only": false, "value": "2026-09-12T09:31:40.174Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-90519", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-12T11:36:50Z", "date_only": false, "value": "2026-09-12T11:36:50.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "cve-2026-90519", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2026-09-13T12:15:08.737Z", "date_only": false, "value": "2026-09-13T12:15:08.737Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-90519", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-13T12:15:08.737Z", "date_only": false, "value": "2026-09-13T12:15:08.737Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "cve-2026-90519", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-13T13:16:27Z", "date_only": false, "value": "2026-09-13T13:16:27Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-7MG8-5R6M-FCRC", "record": "GHSA-7MG8-5R6M-FCRC", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-13T13:16:27.697Z", "date_only": false, "value": "2026-09-13T13:16:27.697", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-90519", "record": "FKIE_CVE-2026-90519", "field": "published"}, {"timestamp": "2026-09-13T15:30:21Z", "date_only": false, "value": "2026-09-13T15:30:21Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-7MG8-5R6M-FCRC", "record": "GHSA-7MG8-5R6M-FCRC", "field": "published"}, {"timestamp": "2026-09-13T15:30:21Z", "date_only": false, "value": "2026-09-13T15:30:21Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-7MG8-5R6M-FCRC", "record": "GHSA-7MG8-5R6M-FCRC", "field": "modified"}, {"timestamp": "2026-09-15T13:42:27.322Z", "date_only": false, "value": "2026-09-15T13:42:27.322018Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-90519", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-15T13:42:27.322Z", "date_only": false, "value": "2026-09-15T13:42:27.322018Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-90519", "record": "FKIE_CVE-2026-90519", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-15T14:00:13.560Z", "date_only": false, "value": "2026-09-15T14:00:13.560Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-90519", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-15T14:00:13.560Z", "date_only": false, "value": "2026-09-15T14:00:13.560Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-90519", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-15T15:17:28.087Z", "date_only": false, "value": "2026-09-15T15:17:28.087", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-90519", "record": "FKIE_CVE-2026-90519", "field": "lastModified"}, {"timestamp": "2026-09-15T16:01:41.449Z", "date_only": false, "value": "2026-09-15T16:01:41.449673Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/KhoaPhan8I/b7899621299193d7b7079d85f4806beb", "record": "CVE-2026-90519", "field": "creation_timestamp", "uuid": "597c8357-e01c-4343-97e5-a4a64019bfb2", "content": "# CVE Intel Feed \u2014 Offer (2026-09-15)\n\n## Product\n\nDaily JSON feed: 20 hot CVEs with local-lab PoC + fix note each.\nEvidence-first: every item ran green in an isolated fixture.\n\n**NEW \u2014 Live-Proof Premium pack (3 items, REAL vendor-source audits):**\n\n| CVE | Finding | Proof |\n|---|---|---|\n| CVE-2026-81648 (CVSS 10.0) | CryptoPayment WP unauth AJAX \u2192 file-delete + settings overwrite + wallet cleartext | 3 live vectors on Stable 1.2.2 |\n| CVE-2026-57139 (CVSS 9.8) | PraisonAI MCPServer optional-auth default-open | DEFAULT_OPEN_PROVEN on v4.7.8 source |\n| CVE-2026-87911 (CVSS 9.6) | postgres-mcp-server COPY\u2026TO PROGRAM bypass (fixed 1.1.7, confirmed 1.2.1) | FIX_CONFIRMED on vendor source |\n\nPack manifest: `data/live-proof-pack.json` (regenerate: `python scripts/live_pack.py`).\n\n## Sample (redacted, free)\n\n`data/feed-sample.json` \u2014 3 items, PoC stripped. Full feed holds\n20 items with working PoC code + REPORT text.\n\n## Tiers\n\n- **Sample:** free, redacted, shareable.\n- **Full feed:** 20 items + PoC + REPORT. Price on request.\n- **Live-Proof Premium:** 3 REAL vendor-source audits with evidence logs. Price on request.\n- **Custom watch:** vendor/product filter + same-day PoC. Price on request.\n\n## Proof of work (today)\n\n- 255 labs in repo, each PoC executed live (rc=0).\n- Feed packed from real artifacts: `python scripts/feed.py`.\n- Sample packed redacted: `python scripts/feed_sample.py`.\n\n## Contact\n\nReply with target vendor/product list + desired tier.\nDelivery: JSON file + PoC scripts, daily refresh via farm cron.\n\n## Honest limits\n\n- Lab PoCs are synthetic fixtures modeling NVD patterns, not\n  zero-days against live products.\n- No live-scope testing included; buyer confirms own scope.\n- Bounty submission service requires buyer's HackerOne token and\n  live-target evidence per report.\n\n\n{\n  \"date\": \"2026-09-15\",\n  \"count\": 3,\n  \"redacted\": true,\n  \"items\": [\n    {\n      \"cve\": \"CVE-2026-81648\",\n      \"cvss\": 10.0,\n      \"published\": \"2026-09-13T21:17:01.930\",\n      \"summary\": \"The CryptoPayment Gateway WordPress plugin from 1.2.1 to 1.2.2 does not apply an authorization check on one of its AJAX endpoints, allowing unauthenticated user\",\n      \"poc\": \"[redacted \\u2014 full PoC in paid feed]\",\n      \"has_report\": true\n    },\n    {\n      \"cve\": \"CVE-2026-90519\",\n      \"cvss\": 6.3,\n      \"published\": \"2026-09-13T13:16:27.697\",\n      \"summary\": \"A weakness has been identified in PHPGurukul Bank Locker Management System 1.0. Affected is an unknown function of the file /blms/banker/add-locker-form.php. Th\",\n      \"poc\": \"[redacted \\u2014 full PoC in paid feed]\",\n      \"has_report\": true\n    },\n    {\n      \"cve\": \"CVE-2026-90520\",\n      \"cvss\": 6.3,\n      \"published\": \"2026-09-13T13:16:28.760\",\n      \"summary\": \"A vulnerability has been found in jaychouchannel Tourism-Management-System up to 84d8ec384f669df3985293dab293bb7b477efa64. This vulnerability affects unknown co\",\n      \"poc\": \"[redacted \\u2014 full PoC in paid feed]\",\n      \"has_report\": true\n    }\n  ]\n}", "url": "https://gist.github.com/KhoaPhan8I/b7899621299193d7b7079d85f4806beb"}]}