PT-2026-67517

Name of the Vulnerable Software and Affected Versions Z-BlogPHP version 1.7.5 Description An authenticated attacker can execute arbitrary SQL commands through a SQL injection flaw in the CommentBat feature. The issue occurs via the id parameter. Recommendations At the moment, there is no...

CVE-2026-15383: Improper Neutralization of Input During Web Page Generation

The Blog Floating Button WordPress plugin through 1.4.20 does not sanitize or escape the visitor User-Agent header, which it stores through an unauthenticated tracking REST endpoint and later renders unescaped in an administrator report page. This allows an unauthenticated attacker to store a...

PT-2026-67072

The Blog Floating Button WordPress plugin through 1.4.20 does not sanitize or escape the visitor User-Agent header, which it stores through an unauthenticated tracking REST endpoint and later renders unescaped in an administrator report page. This allows an unauthenticated attacker to store a...

CVE-2026-58184

creationtimestamp| type| source ---|---|--- 2026-08-01 02:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrygr6wph32r...

CVE-2026-64641

creationtimestamp| type| source ---|---|--- 2026-07-31 17:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrxgvwwzcr26...

CVE-2026-64808

creationtimestamp| type| source ---|---|--- 2026-07-31 10:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrwr4la2762m...

CVE-2026-65616

creationtimestamp| type| source ---|---|--- 2026-07-31 06:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrwdpgbz3b2c 2026-09-13 14:00:11+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/102203 2026-09-14 00:00:13+00:00| published-proof-of-concept|...

OpenMatter Network Calls on Enterprise Leaders to Rethink AI Security Before the Next Rogue AI Crisis

Melbourne, Florida, 30th July 2026, CyberNewswire...

A Civilian Plane Crashed in New Mexico. Was the Military’s Tech to Blame?

Drone warfare is making the skies more dangerous, even for airplanes far from the battlefield...

CVE-2025-65337

Sourcecodester Fantastic Blog CMS 1.0 is vulnerable to Cross Site Scripting XSS in pageEditMember.php via the address field...

Stored-XSS-via-Content-Tag-Names-Microweber-

Stored XSS via Content Tag Names - Microweber CMS 2.0.20 Re...

CVE-2025-65337

Sourcecodester Fantastic Blog CMS 1.0 is vulnerable to Cross Site Scripting XSS in pageEditMember.php via the address field...

CVE-2025-65337

Sourcecodester Fantastic Blog CMS 1.0 is vulnerable to Cross Site Scripting XSS in pageEditMember.php via the address field...

CVE-2025-65337

Sourcecodester Fantastic Blog CMS 1.0 is vulnerable to Cross Site Scripting (XSS) . The flaw exists in the pageEditMember.php component, specifically triggered through the address field. Exploitation details or specific proof-of-concept links are not provided in the documentation. Impact is chara...

CVE-2025-65337

Sourcecodester Fantastic Blog CMS 1.0 is vulnerable to Cross Site Scripting XSS in pageEditMember.php via the address field...

PT-2026-65905

Name of the Vulnerable Software and Affected Versions Sourcecodester Fantastic Blog CMS version 1.0 Description Cross Site Scripting XSS occurs in the 'pageEditMember.php' endpoint through the address field. XSS is a flaw that allows an attacker to inject malicious scripts into web pages viewed b...

CVE-2025-65337: Improper Neutralization of Input During Web Page Generation

Sourcecodester Fantastic Blog CMS 1.0 is vulnerable to Cross Site Scripting XSS in pageEditMember.php via the address field...

EUVD-2025-210531

Sourcecodester Fantastic Blog CMS 1.0 is vulnerable to Cross Site Scripting XSS in pageEditMember.php via the address field...

Solve Multi-CDN Entitlement Drift with Edge Functions Without Losing Viewers

...

WordPress Plugin Uploader 1.0.4 - Cross-Site Scripting Detection

Multiple cross-site scripting vulnerabilities in views/notify.php in the Uploader plugin 1.0.4 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 notify or 2 blog parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple cross-site scripting vulnerabiliti...