122351 matches found
CVE-2026-14919
The ShopMonitor.io WordPress plugin, in versions before 1.2.0 , is vulnerable to an unauthenticated administrator account takeover . The root cause is an improperly restricted email-rerouting test mode that relies on a trusted-source check satisfiable via client-supplied request headers . This fl...
GHSA-RCR6-4JQH-J84M
creationtimestamp| type| source ---|---|--- 2026-07-31 06:00:03+00:00| seen| https://t.me/cyberwarehouse/1178 2026-08-01 00:00:39+00:00| published-proof-of-concept| https://t.me/cyberwarehouse/1178 2026-09-02 06:00:05+00:00| seen| https://t.me/HackingTeamGrupoOfficial/48243 2026-09-03...
CVE-2026-18452 Rich Source｜DMS+ (Non-Mobile) - Use of Hard-coded Credentials
DMS+ Non-Mobile developed by Rich Source has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed API key to gain control over all installed DMS+ devices...
CVE-2026-18452
CVE-2026-18452 affects DMS+ (Non-Mobile) by Rich Source and is due to use of hard-coded credentials (a fixed API key). Unauthenticated remote attackers can exploit this to gain control over all installed DMS+ devices. The provided metrics indicate a critical impact (CVSS v4.0 10.0; CVSS v3.1 10.0...
CVE-2026-18452
DMS+ Non-Mobile developed by Rich Source has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed API key to gain control over all installed DMS+ devices...
EUVD-2026-51406
DMS+ Non-Mobile developed by Rich Source has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed API key to gain control over all installed DMS+ devices...
GHSA-7683-3W9X-CH42
creationtimestamp| type| source ---|---|--- 2026-07-31 05:31:42+00:00| seen| https://gist.github.com/alon710/14986c8aa9f0de6cc9812b6e85b52624...
CVE-2026-43832
creationtimestamp| type| source ---|---|--- 2026-07-31 05:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrw7fos4ox2e 2026-08-02 20:02:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms4rjom5i62b...
CVE-2026-43831
creationtimestamp| type| source ---|---|--- 2026-07-31 05:18:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrw7c5jmrb2u...
CVE-2026-43829
creationtimestamp| type| source ---|---|--- 2026-07-31 05:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrw7c4bk3p2e 2026-08-02 21:02:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms4uuzsh4t2g...
CVE-2026-51371
creationtimestamp| type| source ---|---|--- 2026-07-31 05:02:47+00:00| seen| https://bsky.app/profile/hermes71.bsky.social/post/3mrw6gqxai42n 2026-08-01 04:58:43+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3mryoodbpnu2r...
CVE-2026-62416
creationtimestamp| type| source ---|---|--- 2026-07-31 04:45:40+00:00| seen| https://jvn.jp/en/vu/JVNVU92540957 2026-08-03 10:10:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3myb6nvixzxk7...
CVE-2026-60011
creationtimestamp| type| source ---|---|--- 2026-07-31 04:45:38+00:00| seen| https://jvn.jp/en/vu/JVNVU98759887 2026-08-03 10:04:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3fpysahdivspe 2026-08-04 03:18:29+00:00| seen|...
CVE-2026-63545
creationtimestamp| type| source ---|---|--- 2026-07-31 04:45:33+00:00| seen| https://jvn.jp/en/vu/JVNVU98759887...
CVE-2026-66408
creationtimestamp| type| source ---|---|--- 2026-07-31 04:45:30+00:00| seen| https://jvn.jp/en/vu/JVNVU92804348...
CVE-2026-66407
creationtimestamp| type| source ---|---|--- 2026-07-31 04:45:28+00:00| seen| https://jvn.jp/en/vu/JVNVU92804348 2026-08-10 11:25:16+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117070962122003813...
CVE-2026-66405
creationtimestamp| type| source ---|---|--- 2026-07-31 04:45:25+00:00| seen| https://jvn.jp/en/vu/JVNVU92804348...
CVE-2026-66403
creationtimestamp| type| source ---|---|--- 2026-07-31 04:45:20+00:00| seen| https://jvn.jp/en/vu/JVNVU92804348...