WordPress Bit File Manager plugin < 6.9.1 - Subscriber+ Arbitrary File Read and Deletion via Connector Command Request-Source Mismatch vulnerability

Subscriber+ Arbitrary File Read and Deletion via Connector Command Request-Source Mismatch vulnerability discovered by Artus KG in WordPress Plugin Bit File Manager versions 6.9.1...

WordPress WP Rocket plugin <= 3.21.0.1 - Unauthenticated Stored Cross-Site Scripting via Picture Source Attributes in rocket_beacon Endpoint vulnerability

Unauthenticated Stored Cross-Site Scripting via Picture Source Attributes in rocketbeacon Endpoint vulnerability discovered by WordFence in WordPress Plugin WP Rocket versions = 3.21.0.1...

CVE-2026-5934 WP Rocket <= 3.21.0.1 - Unauthenticated Stored Cross-Site Scripting via Picture Source Attributes in rocket_beacon Endpoint

The WP Rocket plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.21.0.1. This is due to insufficient input sanitization and output escaping of user-supplied data via the rocketbeacon AJAX endpoint. This makes it possible for unauthenticated...

CVE-2026-5934 WP Rocket <= 3.21.0.1 - Unauthenticated Stored Cross-Site Scripting via Picture Source Attributes in rocket_beacon Endpoint

The WP Rocket plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.21.0.1. This is due to insufficient input sanitization and output escaping of user-supplied data via the rocketbeacon AJAX endpoint. This makes it possible for unauthenticated...

ArchiveBox

🗃 Open source self-hosted web archiving. Takes URLs/browser history/bookmarks/Pocket/Pinboard/etc., saves HTML, JS, PDFs, media, and more...

CVE-2026-80681

creationtimestamp| type| source ---|---|--- 2026-08-28 09:16:01+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117172375439048635 2026-08-29 17:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muaf5sz3ie2j...

AZL-98078 CVE-2026-80704 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use proper context for logging The same as the rest of the code, getssinfofromatombios uses calcpllcs-ctx-logger for logging. But calcpllcs-ctx is initialized only later in calcpllmaxvcoconstruct. Therefore, any...

CVE-2026-80615

In the Linux kernel, the following vulnerability has been resolved: net: dstmetadata: fix false-positive memcpy overflow in tundstunclone kmallocflex in metadatadstalloc sets countedby for the structure to the optionslen, which is then initialized to zero. Later, we're initializing the structure ...

UBUNTU-CVE-2026-80704

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use proper context for logging The same as the rest of the code, getssinfofromatombios uses calcpllcs-ctx-logger for logging. But calcpllcs-ctx is initialized only later in calcpllmaxvcoconstruct. Therefore, any...

CVE-2026-70463

creationtimestamp| type| source ---|---|--- 2026-08-28 07:00:04+00:00| seen| https://t.me/GithubRedTeam/100048 2026-08-29 00:00:12+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100048 2026-08-29 23:00:17+00:00| seen| Telegram/1ntteSDNdPxs32IUiQdBAZyZztmyxGolb6r3UtF0KH6NiwM...

EUVD-2026-67439

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use proper context for logging The same as the rest of the code, getssinfofromatombios uses calcpllcs-ctx-logger for logging. But calcpllcs-ctx is initialized only later in calcpllmaxvcoconstruct. Therefore, any...

CVE-2026-80615

CVE-2026-80615 affects the Linux kernel net: dst_metadata subsystem. In metadata_dst_alloc(), kmalloc_flex() sets the __counted_by annotation to options_len, which is initialized to zero . When skb_tunnel_info_unclone later copies tunnel info plus options into the structure, clang with source for...

EUVD-2026-67491

In the Linux kernel, the following vulnerability has been resolved: net: dstmetadata: fix false-positive memcpy overflow in tundstunclone kmallocflex in metadatadstalloc sets countedby for the structure to the optionslen, which is then initialized to zero. Later, we're initializing the structure ...

CVE-2026-80600 batman-adv: dat: acquire ARP hw source only after skb realloc

In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: acquire ARP hw source only after skb realloc The pskbmaypull called by batadvgetvid could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an...

CVE-2026-80600

In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: acquire ARP hw source only after skb realloc The pskbmaypull called by batadvgetvid could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an...

CVE-2026-82089

creationtimestamp| type| source ---|---|--- 2026-08-28 06:33:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2chzf6m3i73fv...

CVE-2026-13086

creationtimestamp| type| source ---|---|--- 2026-08-28 04:07:47+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu4ig6vcwt2b 2026-08-29 16:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muabaon2662b...

CVE-2026-82072

creationtimestamp| type| source ---|---|--- 2026-08-28 02:15:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/bhi3iudprzoxf 2026-08-29 02:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu6s5ctlbu2u...

BEACON: Behavior-Anchored Cross-Source Knowledge Graph Construction for Cyber Threat Intelligence

Cyber threat intelligence CTI is foundational to modern cyber defense, yet much of it resides in unstructured reports whose volume and heterogeneity far exceed manual analysis, motivating research on automatically constructing knowledge graphs from CTI reports. However, existing approaches mainly...

CVE-2026-56854: Incorrect Authorization

The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. Permissions returned by the PasswordCallback, KeyboardInteractiveCallback,...