WordPress Chama plugin < 1.0.13 - Unauthenticated Arbitrary User Password Reset vulnerability

Unauthenticated Arbitrary User Password Reset vulnerability discovered by moonge in WordPress Plugin ChamaWP versions 1.0.13...

WordPress Clearfy plugin < 2.4.3 - Admin+ PHP Object Injection via Settings Import vulnerability

Admin+ PHP Object Injection via Settings Import vulnerability discovered by Omar Elshopky in WordPress Plugin Clearfy Cache versions 2.4.3...

CVE-2026-75860

creationtimestamp| type| source ---|---|--- 2026-08-20 07:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117126661700027750 2026-08-20 07:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mtipz7f4er27 2026-08-20 10:00:05+00:00| seen|...

ECHO-38C1-1304-759B

Bulletin has no description...

ROOT-APP-NPM-CVE-2025-27152 CVE-2025-27152 in axios - Patched by Root

Root has patched CVE-2025-27152 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-58754 CVE-2025-58754 in axios - Patched by Root

Root has patched CVE-2025-58754 in the axios package for Root:npm. Multiple fixed versions available...

BELL-CVE-2026-66046

Bulletin has no description...

BELL-CVE-2026-70907

Bulletin has no description...

BELL-CVE-2026-70906

Bulletin has no description...

BELL-CVE-2026-60589

Bulletin has no description...

BELL-CVE-2026-61308

Bulletin has no description...

DEBIAN-CVE-2026-76956

In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks, causing a denial of service via crafted XML content...

DEBIAN-CVE-2026-76957

libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after-free can occur. NOTE: this is similar to CVE-2026-50219, CVE-2026-56131 and CVE-2026-56412...

CVE-2026-76880

creationtimestamp| type| source ---|---|--- 2026-08-20 05:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtihn6ltts2m 2026-08-21 01:01:38+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mtkkqvpkff23 2026-08-21 01:01:55+00:00| seen|...

CVE-2026-76070

creationtimestamp| type| source ---|---|--- 2026-08-20 05:00:03+00:00| published-proof-of-concept| Telegram/XofvqRV5hkEKine-AqSThWE3tYrgZQJPu8IyHlpngfjWOA 2026-08-21 00:00:10+00:00| published-proof-of-concept| Telegram/XofvqRV5hkEKine-AqSThWE3tYrgZQJPu8IyHlpngfjWOA...

CVE-2026-76351

creationtimestamp| type| source ---|---|--- 2026-08-20 04:47:11+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820 2026-08-21 00:00:08+00:00| published-proof-of-concept| Telegram/87w5sTCGBPeMw8h3c2UBbBkEJEqeSW1iUUAENsR3qsz5w...

D-Link DIR-615 - Unauthorized Access

D-Link DIR-615 devices with firmware 20.06 are susceptible to unauthorized access. An attacker can access the WAN configuration page wan.htm without authentication, which can lead to disclosure of WAN settings, data modification, and/or other unauthorized operations. id: CVE-2021-42627 info: name...

WordPress RegistrationMagic <5.0.1.6 - Authenticated SQL Injection

WordPress RegistrationMagic plugin before 5.0.1.6 contains an authenticated SQL injection vulnerability. The plugin does not escape user input in its rmchronosajax AJAX action before using it in a SQL statement when duplicating tasks in batches. An attacker can possibly obtain sensitive...

Cisco IOS HTTP Configuration - Authentication Bypass

HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL. id: CVE-2001-0537 info: name: Cisco IOS HTTP Configuration - Authentication Bypass author:...

MLFlow < 2.8.1 - Sensitive Information Disclosure

An issue in MLFlow versions 2.8.1 and before allows a remote attacker to obtain sensitive information via a crafted request to REST API. id: CVE-2023-43472 info: name: MLFlow 2.8.1 - Sensitive Information Disclosure author: ritikchaddha severity: high description: | An issue in MLFlow versions...