subq oracle feed

Daily subq-snap-preview predictions on fresh CVEs, new Show HN posts, and newly disclosed HackerOne reports, resolved in public against their base rates.

generated 2026-10-13T15:16:05Z - methodology

Predictions

Fresh CVEs

2026-10-11

CVE-2026-108474 (published 2026-10-10T00:17:03.673) In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions Weakness: CWE-89 CVSS base score 9.8 (CRITICAL)

snap 0.11 / baseline 0.00 #

Will this CVE be added to the CISA Known Exploited Vulnerabilities catalog within 90 days? battery v1, subq-snap-preview, issued 2026-10-11T06:43:45Z, artifact CVE-2026-108474

CVE-2026-104022 (published 2026-10-10T03:17:03.953) The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.0.3. This is due t...

snap 0.05 / baseline 0.00 #

Will this CVE be added to the CISA Known Exploited Vulnerabilities catalog within 90 days? battery v1, subq-snap-preview, issued 2026-10-11T06:43:45Z, artifact CVE-2026-104022

CVE-2026-104915 (published 2026-10-10T03:17:04.107) The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.0.3. This is due t...

snap 0.04 / baseline 0.00 #

Will this CVE be added to the CISA Known Exploited Vulnerabilities catalog within 90 days? battery v1, subq-snap-preview, issued 2026-10-11T06:43:45Z, artifact CVE-2026-104915

CVE-2026-93883 (published 2026-10-10T03:17:08.797) The Advanced Classifieds & Directory Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'phone' parameter in all versions up to, and including, 3.4.4 due to insuf...

snap 0.02 / baseline 0.00 #

Will this CVE be added to the CISA Known Exploited Vulnerabilities catalog within 90 days? battery v1, subq-snap-preview, issued 2026-10-11T06:43:45Z, artifact CVE-2026-93883

CVE-2026-101947 (published 2026-10-10T04:18:06.413) ExifTool for photo and video 5.0.1-gms by CellHubs constructs shell command strings from file paths and invokes /system/bin/sh -c. In the CSV-export path, the selected media path is merely...

snap 0.04 / baseline 0.00 #

Will this CVE be added to the CISA Known Exploited Vulnerabilities catalog within 90 days? battery v1, subq-snap-preview, issued 2026-10-11T06:43:45Z, artifact CVE-2026-101947

Show HN

2026-10-11

Show HN: SynoRing – An input ring for smart glasses and everything

snap 0.32 / baseline 0.09 / outcome: false ({"checked_at": "2026-10-13T15:14:07Z", "points": 1}) #

Will this Show HN post have 30 or more points when checked at or after 48 hours? battery v1, subq-snap-preview, issued 2026-10-11T06:35:52Z, artifact 50040122

Show HN: Localci, run your GitHub Actions jobs locally before you push

snap 0.65 / baseline 0.09 / outcome: false ({"checked_at": "2026-10-13T15:14:07Z", "points": 1}) #

Will this Show HN post have 30 or more points when checked at or after 48 hours? battery v1, subq-snap-preview, issued 2026-10-11T06:35:52Z, artifact 50039994

Show HN: GSD Task Manager – an MCP server that gives your AI agent a task list

snap 0.36 / baseline 0.09 / outcome: false ({"checked_at": "2026-10-13T15:14:07Z", "points": 7}) #

Will this Show HN post have 30 or more points when checked at or after 48 hours? battery v1, subq-snap-preview, issued 2026-10-11T06:35:52Z, artifact 50039633

Show HN: Perigee real-time web viewer of artificial objects in space

snap 0.61 / baseline 0.09 / outcome: false ({"checked_at": "2026-10-13T15:14:07Z", "points": 1}) #

Will this Show HN post have 30 or more points when checked at or after 48 hours? battery v1, subq-snap-preview, issued 2026-10-11T06:35:52Z, artifact 50039577

Show HN: Color Swapper – Recolor a terminal screenshot to find the right colors

snap 0.39 / baseline 0.09 / outcome: false ({"checked_at": "2026-10-13T15:14:07Z", "points": 2}) #

Will this Show HN post have 30 or more points when checked at or after 48 hours? battery v1, subq-snap-preview, issued 2026-10-11T06:35:52Z, artifact 50039383

Show HN: I wrote Dependency Hell 5 years ago. Today I updated it for AI Era [pdf]

snap 0.49 / baseline 0.09 / outcome: false ({"checked_at": "2026-10-13T15:14:07Z", "points": 3}) #

Will this Show HN post have 30 or more points when checked at or after 48 hours? battery v1, subq-snap-preview, issued 2026-10-11T06:35:52Z, artifact 50039051

Show HN: An unofficial download picker for the ArtCraft Rust apps

snap 0.14 / baseline 0.09 / outcome: false ({"checked_at": "2026-10-13T15:14:07Z", "points": 5}) #

Will this Show HN post have 30 or more points when checked at or after 48 hours? battery v1, subq-snap-preview, issued 2026-10-11T06:35:52Z, artifact 50039007

Show HN: Infinite – open-source node-based DAW for visuals, music and code

snap 0.61 / baseline 0.09 / outcome: false ({"checked_at": "2026-10-13T15:14:07Z", "points": 1}) #

Will this Show HN post have 30 or more points when checked at or after 48 hours? battery v1, subq-snap-preview, issued 2026-10-11T06:35:51Z, artifact 50040304

Show HN: Suta – A skill to reduce AI slop in generated UIs

snap 0.25 / baseline 0.09 / outcome: false ({"checked_at": "2026-10-13T15:14:07Z", "points": 1}) #

Will this Show HN post have 30 or more points when checked at or after 48 hours? battery v1, subq-snap-preview, issued 2026-10-11T06:35:51Z, artifact 50040224

Show HN: Another App Store Screenshot Creator, but with high quality images Why is it so hard to create simple, but beautiful app store screenshots? I tried several tools and they either want money or the image resolution export is crap. Un...

snap 0.34 / baseline 0.09 / outcome: false ({"checked_at": "2026-10-13T15:14:07Z", "points": 1}) #

Will this Show HN post have 30 or more points when checked at or after 48 hours? battery v1, subq-snap-preview, issued 2026-10-11T06:35:51Z, artifact 50040177

HackerOne disclosures

2026-10-11

ActionText `to_markdown` still allows `javascript:` links in kramdown via Rails-generated table cells after PR #58754 (program: rails, Cross-site Scripting (XSS) - Reflected)

snap 0.54 / baseline 0.56 #

Will a publicly disclosed HackerOne report with the same CWE be disclosed for a different program within 30 days of this report's disclosure? battery v1, subq-snap-preview, issued 2026-10-11T06:39:19Z, artifact https://hackerone.com/reports/4082665

Information Disclosure - Unauthen Leak Private Content (program: wordpress, Information Disclosure)

snap 0.74 / baseline 0.56 #

Will a publicly disclosed HackerOne report with the same CWE be disclosed for a different program within 30 days of this report's disclosure? battery v1, subq-snap-preview, issued 2026-10-11T06:39:19Z, artifact https://hackerone.com/reports/4053546

Pending resolutions

Scoreboard

Brier score vs the baseline frozen on each prediction; lower is better. Verdicts render once a slot reaches 5 resolved; below that, counts only.

slotbatteryresolvedtrueunresolvedpendingsnapbaselineverdict
Fresh CVEsv10005n/an/a5 pending, first resolves 2027-01-09
HackerOne disclosuresv10002n/an/a2 pending, first resolves 2026-11-09
Show HNv1100000.1980.008baseline ahead

Missed days and outages

None recorded.