CVE-2026-87846 Shipping for Nova Poshta 1.18.7 - 1.19.8 - Unauthenticated Order Shipment Record Deletion

The Shipping for Nova Poshta WordPress plugin through 1.19.8 does not perform any authorisation, nonce or ownership checks on one of its AJAX actions available to unauthenticated users, allowing anyone to delete the shipment records of arbitrary orders and to make the store issue the carrier's...

CVE-2026-87846 Shipping for Nova Poshta 1.18.7 - 1.19.8 - Unauthenticated Order Shipment Record Deletion

The Shipping for Nova Poshta WordPress plugin through 1.19.8 does not perform any authorisation, nonce or ownership checks on one of its AJAX actions available to unauthenticated users, allowing anyone to delete the shipment records of arbitrary orders and to make the store issue the carrier's...

CVE-2026-97468

creationtimestamp| type| source ---|---|--- 2026-10-09 10:56:21+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/6woj3b55a6brg...

CVE-2026-100227

creationtimestamp| type| source ---|---|--- 2026-10-09 10:47:01+00:00| seen| https://bsky.app/profile/suriq.io/post/3mxgscqkvh32h...

CVE-2026-107937

creationtimestamp| type| source ---|---|--- 2026-10-09 10:47:01+00:00| seen| https://bsky.app/profile/suriq.io/post/3mxgscqkvh32h...

CVE-2026-107938

creationtimestamp| type| source ---|---|--- 2026-10-09 10:47:01+00:00| seen| https://bsky.app/profile/suriq.io/post/3mxgscqkvh32h...

CVE-2026-73179

creationtimestamp| type| source ---|---|--- 2026-10-09 10:45:21+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/eqmnxxs6tvsby...

CVE-2026-71575

creationtimestamp| type| source ---|---|--- 2026-10-09 10:37:20+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/gib7o2crpbqvv...

CVE-2026-107715

creationtimestamp| type| source ---|---|--- 2026-10-09 10:30:30+00:00| seen| https://gist.github.com/alon710/d798ff57e2b794b2a7454047e0b97580...

GHSA-2MWR-XJCG-37J7

creationtimestamp| type| source ---|---|--- 2026-10-09 10:30:30+00:00| seen| https://gist.github.com/alon710/d798ff57e2b794b2a7454047e0b97580...

CVE-2026-93947

creationtimestamp| type| source ---|---|--- 2026-10-09 10:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117410485051856991 2026-10-09 10:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mxgrf4sgel2w...

CVE-2026-88745

creationtimestamp| type| source ---|---|--- 2026-10-09 09:50:05+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117410326265701320...

CVE-2026-98375

creationtimestamp| type| source ---|---|--- 2026-10-09 09:46:20+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/bd4u2pcqsron3...

CVE-2026-97655

creationtimestamp| type| source ---|---|--- 2026-10-09 09:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mxgofqf4tq2u...

CVE-2026-107399

creationtimestamp| type| source ---|---|--- 2026-10-09 09:30:30+00:00| seen| https://gist.github.com/alon710/2dbcf719cd5bc48c77a596fbdbc6410f...

GHSA-C6RP-P8XM-4Q9F

creationtimestamp| type| source ---|---|--- 2026-10-09 09:30:30+00:00| seen| https://gist.github.com/alon710/2dbcf719cd5bc48c77a596fbdbc6410f...

Malicious code in ig-gox (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 780638a0747103eb44a85312a2cfb552981e498655f638c5baf86eb4a5f74042 Package hides obfuscated code aimed to avoid analysis and downloading the remote stage. The remote code is used to abuse Instagram service for mass fake accoun...

Exploit for Improper Input Validation in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4Shell CVE-2021-44228 — VMware RCE & Patch Validation Lab...

dawnscanner

Dawnscanner - The raising security scanner for ruby web applications dawn is a source code scanner designed to review your web applications for security issues. The tool is able to scan web applications written in Ruby and it supports all major MVC Model View Controller frameworks, out of the box...

APTSimulator

APT Simulator Important: Don't just ZIP download or clone the repo if you don't plan to develop some test. Use the package in the release which contains a packaged version with encrypted archives that don't contain cleartext samples and tools. APT Simulator is a Windows Batch script that uses a s...