CVE-2026-18322

The Smart Popup by Supsystic plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.12.0. This is due to a permission map collision in the havePermissions function in classes/frame.php, where arraymerge overwrites the popup module's...

EUVD-2026-53108

The User Registration & Membership WordPress plugin before 5.2.6 does not enforce the site's registration-disabled setting when processing registration-form submissions, allowing unauthenticated users to create new accounts even when the administrator has turned off open registration...

CVE-2020-5895

creationtimestamp| type| source ---|---|--- 2026-08-05 06:00:08+00:00| seen| https://t.me/timcorehacking/882 2026-08-06 00:00:51+00:00| exploited| https://t.me/timcorehacking/882...

GHSA-JM22-3W23-5Q7W

creationtimestamp| type| source ---|---|--- 2026-08-05 05:32:02+00:00| seen| https://gist.github.com/alon710/0b530d759c455a262a40add3fda52d22...

CVE-2020-10631

creationtimestamp| type| source ---|---|--- 2026-08-05 05:00:06+00:00| seen| https://t.me/timcorehacking/841 2026-08-06 00:00:50+00:00| seen| https://t.me/timcorehacking/841...

CVE-2020-7493

creationtimestamp| type| source ---|---|--- 2026-08-05 05:00:05+00:00| seen| https://t.me/timcorehacking/890 2026-08-06 00:00:53+00:00| seen| https://t.me/timcorehacking/890...

CVE-2020-5537

creationtimestamp| type| source ---|---|--- 2026-08-05 05:00:05+00:00| seen| https://t.me/timcorehacking/896 2026-08-06 00:00:53+00:00| published-proof-of-concept| https://t.me/timcorehacking/896...

CVE-2020-1215

creationtimestamp| type| source ---|---|--- 2026-08-05 05:00:05+00:00| seen| https://t.me/timcorehacking/907 2026-08-06 00:00:54+00:00| seen| https://t.me/timcorehacking/907...

CVE-2020-1223

creationtimestamp| type| source ---|---|--- 2026-08-05 05:00:04+00:00| seen| https://t.me/timcorehacking/907 2026-08-06 00:00:55+00:00| seen| https://t.me/timcorehacking/907...

CVE-2020-3379

creationtimestamp| type| source ---|---|--- 2026-08-05 05:00:04+00:00| seen| https://t.me/timcorehacking/946 2026-08-06 00:00:55+00:00| seen| https://t.me/timcorehacking/946...

CVE-2020-9634

creationtimestamp| type| source ---|---|--- 2026-08-05 05:00:03+00:00| seen| https://t.me/timcorehacking/919 2026-08-06 00:00:55+00:00| seen| https://t.me/timcorehacking/919...

CVE-2026-66344

creationtimestamp| type| source ---|---|--- 2026-08-05 04:45:04+00:00| seen| https://jvn.jp/en/jp/JVN28045338...

GHSA-CJ62-HVV2-2Q5H

creationtimestamp| type| source ---|---|--- 2026-08-05 03:31:03+00:00| seen| https://gist.github.com/alon710/7709dc60acce15f366b5c87665dcce14...

CVE-2026-70592

creationtimestamp| type| source ---|---|--- 2026-08-05 03:31:03+00:00| seen| https://gist.github.com/alon710/7709dc60acce15f366b5c87665dcce14...

CVE-2026-54917

creationtimestamp| type| source ---|---|--- 2026-08-05 03:00:05+00:00| seen| https://t.me/GithubRedTeam/96685 2026-08-05 21:00:04+00:00| seen| Telegram/sjJtFOPrNVJGH8Bcyfvt2TqqQ7q8xvrKLNMkHdu0Vl11BjU 2026-08-06 00:00:08+00:00| published-proof-of-concept|...

GHSA-CJC9-Q5GF-327P

creationtimestamp| type| source ---|---|--- 2026-08-05 02:31:21+00:00| seen| https://gist.github.com/alon710/8b519f2c594fb49b15bc37a85db39cf9...

GHSA-7MPP-R37J-X5WH

creationtimestamp| type| source ---|---|--- 2026-08-05 01:31:27+00:00| seen| https://gist.github.com/alon710/a8f899d9b938031c01419f5cf3be4d0e...

GHSA-XPP7-93X6-V29M

creationtimestamp| type| source ---|---|--- 2026-08-05 00:31:06+00:00| seen| https://gist.github.com/alon710/3fbc424d9726688cb9c9bb1b3b35fa73...

Link following vulnerability allows arbitrary file creation

Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not safely handle symbolic links with effectively empty names during the extraction of .tar and .tar.gz archives. This allows attackers able to control agent processes to provide crafted archives to the controller to write files to arbitrary...

📄 ICS-Park Smart Park Management System 2.0 Privilege Escalation

A proof of concept exploit for a privilege escalation vulnerability in ICS-Park Smart Park Management System version 2.0. Missing authorization checks allow an authenticated low-privileged user to create a role containing arbitrary permissions, assign that role to their own account, and create ne...