My Calendar < 3.7.9 - Unauthenticated SQL Injection

The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'mcauth' parameter in all versions up to, and including, 3.7.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

Concrete CMS <9.5.1 - Unauthenticated File Usage Disclosure

Concrete CMS 9.5.0 and below is vulnerable to unauthenticated file usage disclosure via missing permission check in the usage controller. id: CVE-2026-6826 info: name: Concrete CMS 9.5.1 - Unauthenticated File Usage Disclosure author: str4k3r severity: medium description: | Concrete CMS 9.5.0 and...

phpBB < 3.3.17 - Authentication Bypass

phpBB before 3.3.17 contains an authentication bypass vulnerability in the login-link feature. By setting the authprovider query parameter to "apache", an unauthenticated attacker can bypass password verification and log in as any user, including administrators. The Apache auth provider trusts th...

Blinko <= 1.8.3 - Path Traversal via /plugins

Blinko = 1.8.3 contains a path traversal caused by improper path concatenation without verification in the plugin file server endpoint, letting remote attackers access arbitrary files, exploit requires network access. id: CVE-2026-23483 info: name: Blinko = 1.8.3 - Path Traversal via /plugins...

CVE-2026-81000

creationtimestamp| type| source ---|---|--- 2026-09-12 01:30:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/117255479208869871 2026-09-12 01:30:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mvbwmmuy522h...

CVE-2026-89266

creationtimestamp| type| source ---|---|--- 2026-09-12 01:00:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvbuw5vi5k2v 2026-09-12 01:40:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/g4lusr4jim5zw 2026-09-12 04:02:16+00:00| seen|...

CVE-2026-89563

creationtimestamp| type| source ---|---|--- 2026-09-12 00:27:45+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117255232866478880...

CVE-2026-89494

creationtimestamp| type| source ---|---|--- 2026-09-12 00:00:32+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117255125840040608...

Linux Distros Unpatched Vulnerability : CVE-2026-89448

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/vt-d: Force requesting ACS when tboot is enabled Currently the conditions of requesting ACS in detectinteliommu don't include tboot, leading to a possible...

PT-2026-90780

My 4th official CVE is now assigned: 🔐 Notepad++ 🐞 Stack-based Buffer Overflow ⚠️ High Severity 💥 CVE-2026-85279 A vulnerability in the plugin loading mechanism leading to potential arbitrary code execution. The comeback continues. 🗿🔥 CyberSecurity CVE BugBounty https://t.co/RiRptj80NP...

PT-2026-90781

A new vulnerability with increased severity was disclosed for Microsoft Edge CVE-2026-85892 https://t.co/djdkpt4Ayz...

PT-2026-90663

Bluetooth wallet vulnerability patched — CVE-2026-4412 allowed signature interception within 10 meters on certain hardware wallets. Affected devices required firmware update. Always keep your hardware wallet firmware current. BluetoothSecurity HardwareWallet CVE https://t.co/7FLXrdaIEb...

CVE-2026-43499-jinghu

This repository does not have a README...

CVE-2026-57858

CVE-2026-57858 Wormable exploit for CVE-2026-57858...

CVE-2026-52810

cve-id Donate...

CVE-2026-66384

cve-id Donate...

CVE-2026-56826

creationtimestamp| type| source ---|---|--- 2026-09-11 22:37:18+00:00| published-proof-of-concept| https://github.com/shopperlabs/shopper/security/advisories/GHSA-f7h9-qv4x-9x57...

CVE-2026-56830

creationtimestamp| type| source ---|---|--- 2026-09-11 22:37:07+00:00| published-proof-of-concept| https://github.com/shopperlabs/shopper/security/advisories/GHSA-99h5-jhh7-v3r3...

Yordam-Kutuphane-Otomasyonunda-Coklu-HTML-Enjeksiyonu

Yordam-Kütüphane-Otomasyonunda-Çoklu-HTML-Enjeksiyonu CVE-2026-77818 · CVSS 3.1 6.1 Orta · Siber Güvenlik Başkanlığı · Yayımlanma 2026-09-04 · TR-26-1011 Durum: Zafiyetler v22.2 sürümünde giderilmiştir. Etkilenen kurulumların v22.2 veya üzerine yükseltilmesi gerekmektedir. Genel Bakış Yordam...

CVE-2026-90460

creationtimestamp| type| source ---|---|--- 2026-09-11 21:50:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3aweqrn5ditaf 2026-09-12 03:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mvc3nml2g724 2026-09-12 03:00:28+00:00| seen|...