EUVD-2026-51933

The SMS Alert WordPress plugin before 3.9.8 does not bind its "mobile verified" session flag to the phone number that was actually verified: after an attacker verifies an OTP sent to their own phone, the signup/login handler reads a fresh, attacker-supplied phone number to select the account and...

CVE-2026-15206

CVE-2026-15206 affects the SMS Alert WordPress plugin (before 3.9.8). The vulnerability arises because the plugin does not bind the mobile verified session flag to the actually verified phone number. After an attacker verifies an OTP on their own number, the signup/login handler reads an attacker...

CVE-2026-15206

The SMS Alert WordPress plugin before 3.9.8 does not bind its "mobile verified" session flag to the phone number that was actually verified: after an attacker verifies an OTP sent to their own phone, the signup/login handler reads a fresh, attacker-supplied phone number to select the account and...

CVE-2026-38711

creationtimestamp| type| source ---|---|--- 2026-08-01 00:15:06+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-38711...

CVE-2026-52856

creationtimestamp| type| source ---|---|--- 2026-07-31 19:51:07+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrxq3akldl23 2026-08-02 07:02:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms3fwwqe6w2e...

CVE-2026-58048

creationtimestamp| type| source ---|---|--- 2026-07-31 17:56:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxjnjuke42b 2026-07-31 18:00:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jdwwbzeerzdry 2026-08-01 09:22:36+00:00| seen|...

CVE-2026-51245

creationtimestamp| type| source ---|---|--- 2026-07-31 03:49:01+00:00| seen| https://gist.github.com/programmervuln/12500283acf6ad983a381750f485794a...

CVE-2026-51270

creationtimestamp| type| source ---|---|--- 2026-07-31 00:01:25+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mrvnlus5te2e...

SUSE CVE-2026-47120

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.4.0 to before version 2.0.8, a RoleMember can fire other users' cron tasks via AlertRule.FailTriggerTasks no ownership check. This issue has been patched in version 2.0.8...

CVE-2026-51238

creationtimestamp| type| source ---|---|--- 2026-07-30 10:53:28+00:00| seen| https://gist.github.com/programmervuln/00a0ff0ca36d73e9b57a1f3c3f72cfa9 2026-08-03 14:14:17+00:00| seen| https://gist.github.com/programmervuln/04c10eaee3d6e7370dcaa75337073c4b...

CVE-2026-17782

creationtimestamp| type| source ---|---|--- 2026-07-30 04:51:21+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260730 2026-08-03 09:52:50+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260803...

CVE-2026-54082

creationtimestamp| type| source ---|---|--- 2026-07-29 20:15:05+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-54082...

CVE-2026-54081

creationtimestamp| type| source ---|---|--- 2026-07-29 20:15:02+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-54081...

CVE-2026-20316

creationtimestamp| type| source ---|---|--- 2026-07-29 19:35:50+00:00| seen| https://bsky.app/profile/cvesentinel.bsky.social/post/3mrsoc3g26k2u 2026-07-29 20:00:01+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8dc30cfa-6d78-4c95-8f53-cf5195768d7e...

GHSA-JR45-8VMC-QM54

creationtimestamp| type| source ---|---|--- 2026-07-29 15:21:07+00:00| seen| https://bsky.app/profile/nodeland.dev/post/3mrsa2lvynu25 2026-08-04 12:31:53+00:00| seen| https://gist.github.com/alon710/dbd628dcf4d2ee2986aea22ad7d6f2b4...

CVE-2026-56390

creationtimestamp| type| source ---|---|--- 2026-07-29 12:15:06+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-56389...

CVE-2020-28248

creationtimestamp| type| source ---|---|--- 2026-07-29 12:03:02+00:00| seen| https://t.me/reverseame/655 2026-07-30 00:02:50+00:00| seen| https://t.me/reverseame/655 2026-08-03 14:00:04+00:00| published-proof-of-concept| https://t.me/reverseame/655 2026-08-04 00:00:37+00:00|...

CVE-2016-7279

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:44+00:00| seen| Telegram/SshtlisOkwkgvAnolbrLwx5oTKm56HURNYcC5QZhKCAnvw 2026-07-30 00:02:01+00:00| seen| Telegram/SshtlisOkwkgvAnolbrLwx5oTKm56HURNYcC5QZhKCAnvw 2026-08-01 13:00:04+00:00| seen|...

CVE-2015-2435

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:37+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-07-30 00:01:58+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-08-01 12:00:07+00:00| seen|...

CVE-2016-3320

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:34+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-07-30 00:01:56+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-08-01 12:00:12+00:00| seen|...