CVE-2026-28151

creationtimestamp| type| source ---|---|--- 2026-08-24 12:47:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hnqujzctqb3wg...

WordPress Charitable plugin < 1.8.12 - Unauthenticated Donation Payment-Status Manipulation via Square Webhook Signature Bypass vulnerability

Unauthenticated Donation Payment-Status Manipulation via Square Webhook Signature Bypass vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Charitable versions 1.8.12...

WordPress Tamara Checkout plugin <= 1.9.9.20 - Unauthenticated Order Status Manipulation vulnerability

Unauthenticated Order Status Manipulation vulnerability discovered by Ezekiel Victor in WordPress Plugin Tamara Checkout versions = 1.9.9.20...

Malicious Package

Overview twork-data-services-customer-api-v2-customer-vip-status is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between...

The vulnerability of the drivers/md/dm-zone.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/md/dm-zone.c component in the Linux operating system is related to insufficient checking of the status of the shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROOT-OS-DEBIAN-13-CVE-2026-54371 CVE-2026-54371 in attr - Patched by Root

Root has patched CVE-2026-54371 in the attr package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2024-27415 CVE-2024-27415 in linux - Patched by Root

Root has patched CVE-2024-27415 in the linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2022-49967 CVE-2022-49967 in linux - Patched by Root

Root has patched CVE-2022-49967 in the linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2022-49034 CVE-2022-49034 in linux - Patched by Root

Root has patched CVE-2022-49034 in the linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2024-56592 CVE-2024-56592 in linux - Patched by Root

Root has patched CVE-2024-56592 in the linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-23111 CVE-2026-23111 in linux - Patched by Root

Root has patched CVE-2026-23111 in the linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-38685 CVE-2025-38685 in linux - Patched by Root

Root has patched CVE-2025-38685 in the linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2024-39508 CVE-2024-39508 in linux - Patched by Root

Root has patched CVE-2024-39508 in the linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2024-38632 CVE-2024-38632 in linux - Patched by Root

Root has patched CVE-2024-38632 in the linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2023-53661 CVE-2023-53661 in linux - Patched by Root

Root has patched CVE-2023-53661 in the linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2022-35737 CVE-2022-35737 in sqlite3 - Patched by Root

Root has patched CVE-2022-35737 in the sqlite3 package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-53497 CrossWatch: Unauthenticated /api/app-auth/status endpoint leaks active session metadata (IP, User-Agent, session IDs)

CrossWatch CW is a synchronization engine. Prior to version 0.9.21, GET /api/app-auth/status is accessible without authentication and returns the othersessions array, which exposes metadata of all active sessions — including originating IP addresses, User-Agent strings, internal session IDs, and...

CVE-2026-53497

CrossWatch CW is a synchronization engine. Prior to version 0.9.21, GET /api/app-auth/status is accessible without authentication and returns the othersessions array, which exposes metadata of all active sessions — including originating IP addresses, User-Agent strings, internal session IDs, and...

CVE-2026-71862

Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. From 3.3.0 until 3.9.2, enabling the global showURL setting causes the unauthenticated GET /api/v1/status-page/:url endpoi...

EUVD-2026-64039

Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. From 3.3.0 until 3.9.2, enabling the global showURL setting causes the unauthenticated GET /api/v1/status-page/:url endpoi...