CVE-2026-8726: Improper Neutralization of Special Elements used in an SQL Command

The extension fails to properly sanitize user input before using it in a database query. As a result, an unauthenticated attacker can inject arbitrary SQL through a URL parameter on pages using the "Date Menu of news articles" plugin. Exploitation requires the "Date Menu of news articles" plugin ...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential-stealing payload and worm propagation logic. A malicious actor associated with the "TeamPCP" or "Mini Shai-Hulud" campaign compromised a maintainer's access token; this allowed the...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential-stealing payload and worm propagation logic. A malicious actor associated with the "TeamPCP" or "Mini Shai-Hulud" campaign compromised a maintainer's access token; this allowed the...

CVE-2026-8751

creationtimestamp| type| source ---|---|--- 2026-05-18 11:39:38+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mm4s4budgk23...

CVE-2026-6478

creationtimestamp| type| source ---|---|--- 2026-05-18 09:02:04+00:00| seen| https://bsky.app/profile/PostgreSQL.activitypub.awakari.com.ap.brid.gy/post/3mm4j4wewdng2 2026-06-05 14:33:15+00:00| seen| https://bsky.app/profile/pgexperts.bsky.social/post/3mnke6ysiwm2c 2026-06-23 19:16:28+00:00| seen...

CVE-2026-7498 Stored XSS in Basamak Informatics' DernekWeb

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Basamak Information Technology Consulting and Organization Trade Ltd. Co. DernekWeb allows Stored XSS. This issue affects DernekWeb: through 30122025...

CVE-2026-2325

creationtimestamp| type| source ---|---|--- 2026-05-18 08:39:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4i2k3hdm2c...

GHSA-82J2-J2CH-GFR8

creationtimestamp| type| source ---|---|--- 2026-05-17 18:09:49+00:00| seen| https://gist.github.com/web3securityauditor/7d7d8acf63a2ec18ed25f500c878c123...

CVE-2026-42555

creationtimestamp| type| source ---|---|--- 2026-05-17 17:01:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mm2tm4nnz62z...

CVE-2026-44513

creationtimestamp| type| source ---|---|--- 2026-05-17 17:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mm2tlvd4fv26 2026-05-19 11:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mm7ar25vxk26...

CVE-2026-44827

creationtimestamp| type| source ---|---|--- 2026-05-17 17:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mm2tlo5kue2t...

CVE-2026-8621

creationtimestamp| type| source ---|---|--- 2026-05-17 10:02:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mm2446dhpb2n...

GHSA-Q7RR-3CGH-J5R3

creationtimestamp| type| source ---|---|--- 2026-05-17 09:27:14+00:00| seen| https://gist.github.com/okilicarslan/c1a124840cde2bb66278de96a61a2a72...

CVE-2018-25334

creationtimestamp| type| source ---|---|--- 2026-05-17 04:16:45+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2018-25334 2026-05-17 15:17:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm2nt77cup2r...

CVE-2026-41427

creationtimestamp| type| source ---|---|--- 2026-05-16 16:32:11+00:00| seen| https://gist.github.com/yanchuk/859e9c10826efe814725781953466c18...

CVE-2026-44717

creationtimestamp| type| source ---|---|--- 2026-05-16 16:00:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mly7qseqqs2r...

CVE-2026-44826

creationtimestamp| type| source ---|---|--- 2026-05-16 15:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mly4ft64le2e...

SUSE-SU-2026:21794-1 Security update for agama

This update for agama fixes the following issue - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion bsc1257930. Changes for agama: - Update "time" crate to version 0.3.47...

CVE-2026-5693

creationtimestamp| type| source ---|---|--- 2026-05-16 10:32:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlxnfnaua72c...

GHSA-XGP8-3HG3-C2MH

creationtimestamp| type| source ---|---|--- 2026-05-16 02:04:03+00:00| seen| https://gist.github.com/AlgoDev-hash/09b8d3924b1510f4f9fb853b347af34a 2026-05-17 18:09:49+00:00| seen| https://gist.github.com/web3securityauditor/7d7d8acf63a2ec18ed25f500c878c123...