[SECURITY] Fedora 45 Update: liferea-2.0.1-2.fc45

Liferea Linux Feed Reader is an RSS/RDF feed reader. It's intended to be a clone of the Windows-only FeedReader. It can be used to maintain a list of subscribed feeds, browse through their items, and show their contents...

ransomwatch

ransomwatch 👀 🦅 ransomwatch はランサムウェアグループが使用する恐喝サイトを追跡し、主張の集約フィードを公開します 新しいグループを提出する際は issue テンプレート をご利用ください ⚠️ ransomwatch.telemetry.ltd、posts.json、groups.json 内のコンテンツと、docs/ および source/ ディレクトリは、実際の脅威アクターのホスティング選択に基づいてほぼリアルタイムで動的に生成されます。 サニタイズ処理は行われていますが、ransomwatch...

CVE-2026-93756

The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Facebook Comment Message via v-html in Admin Builder Preview in all versions up to, and including, 4.13.0 due to insufficient input sanitization and output...

CVE-2026-93756 Smash Balloon Social Post Feed <= 4.13.0 - Unauthenticated Stored Cross-Site Scripting via Facebook Comment Message in Admin Builder Preview

The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Facebook Comment Message via v-html in Admin Builder Preview in all versions up to, and including, 4.13.0 due to insufficient input sanitization and output...

EUVD-2026-91253

The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Facebook Comment Message via v-html in Admin Builder Preview in all versions up to, and including, 4.13.0 due to insufficient input sanitization and output...

CVE-2026-93756 Smash Balloon Social Post Feed <= 4.13.0 - Unauthenticated Stored Cross-Site Scripting via Facebook Comment Message in Admin Builder Preview

The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Facebook Comment Message via v-html in Admin Builder Preview in all versions up to, and including, 4.13.0 due to insufficient input sanitization and output...

CVE-2026-93756

The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin (all versions up to and including 4.13.0 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping when handling Facebook Comment Messages via v-html in...

CVE-2026-10026

The CTX Feed Pro plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 7.6.12. This is due to insufficient input validation on the 'Feed Config' field which is passed directly to the eval function. This makes it possible for authenticated attackers, with...

Bugs-feed

Bug's feed Bug's feed는 최신 뉴스, 동영상, CVE, 취약점 등을 검색할 수 있는 로컬 호스팅 포털입니다. PWA 애플리케이션으로 구현되어 브라우저를 벗어나 데스크톱 애플리케이션처럼 사용할 수 있습니다. 다양한 탭을 탐색하여 최신 버그를 확인하거나 모든 탭에서 한 번에 검색할 수 있습니다. 해시태그와 비디오 채널을 원하는 대로 수정할 수 있는 설정 창이 함께 제공됩니다. 🐝 프로젝트 소개 ⚠️ 이것은 저의 첫 번째 대규모 프로젝트입니다. 완벽하지 않으며 개선이 필요합니다. 기여 섹션을 참조하세요. 해킹 및 개발...

CVE-2026-10026 CTX Feed Pro <= 7.6.12 - Authenticated (Administrator+) Remote Code Execution

The CTX Feed Pro plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 7.6.12. This is due to insufficient input validation on the 'Feed Config' field which is passed directly to the eval function. This makes it possible for authenticated attackers, with...

CVE-2026-10026

The CTX Feed Pro plugin for WordPress is vulnerable to Code Injection in all versions up to and including 7.6.12 . The root cause is insufficient input validation on the 'Feed Config' field, which is passed directly to the eval() function. This allows authenticated attackers with Administrator-le...

EUVD-2026-91171

The CTX Feed Pro plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 7.6.12. This is due to insufficient input validation on the 'Feed Config' field which is passed directly to the eval function. This makes it possible for authenticated attackers, with...

CVE-2026-10026 CTX Feed Pro <= 7.6.12 - Authenticated (Administrator+) Remote Code Execution

The CTX Feed Pro plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 7.6.12. This is due to insufficient input validation on the 'Feed Config' field which is passed directly to the eval function. This makes it possible for authenticated attackers, with...

C2-Tracker

C2 Tracker C2 Tracker는 Shodan 및Censys 검색을 사용하여 알려진 악성코드/봇넷/C2 인프라의 IP 주소를 수집하는 무료 커뮤니티 기반 IOC 피드입니다. 이 프로젝트는 보관되었습니다 이 프로젝트는 보관되었습니다. data/ 디렉토리의 텍스트 파일은 제거되었으며 더 이상 업데이트되지 않습니다. tracker.py의 시그니처도 더 이상 업데이트되지 않습니다. 이 프로젝트는 여전히 로컬에서 실행할 수 있습니다. 자세한 내용은 아래를 참조하세요. 감사의 말 많은 쿼리는 다른 CTI 연구자들로부터 가져왔습니다...

PT-2026-104138

Name of the Vulnerable Software and Affected Versions Smash Balloon Social Post Feed – Simple Social Feeds for WordPress versions prior to 4.13.1 Description Insufficient input sanitization and output escaping in the Admin Builder Preview allow unauthenticated attackers to perform Stored Cross-Si...

PT-2026-104075

Name of the Vulnerable Software and Affected Versions CTX Feed Pro versions prior to 7.6.13 Description Insufficient input validation on the 'Feed Config' field allows authenticated attackers with Administrator-level access and above to execute arbitrary PHP code on the server. This occurs becaus...

The vulnerability of RSS and Atom feed handlers in the Git repository management system Gitea allows a hacker to disclose protected information.

The vulnerability of RSS and Atom feed handlers in the Git repository management system Gitea is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

CVE-2026-10026: Improper Control of Generation of Code

The CTX Feed Pro plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 7.6.12. This is due to insufficient input validation on the 'Feed Config' field which is passed directly to the eval function. This makes it possible for authenticated attackers, with...

CVE-2026-93756: Improper Neutralization of Input During Web Page Generation

The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Facebook Comment Message via v-html in Admin Builder Preview in all versions up to, and including, 4.13.0 due to insufficient input sanitization and output...

WordPress CTX Feed Pro plugin <= 7.6.12 - Authenticated (Administrator+) Remote Code Execution vulnerability

Authenticated Administrator+ Remote Code Execution vulnerability discovered by Nguyen Truong Roll, Phap Nguyen Anh in WordPress Plugin CTX Feed Pro versions = 7.6.12...