WordPress User Profile Builder plugin <= 3.15.7 - Unauthenticated Stored Cross-Site Scripting via 'Biographical Info' Meta Field vulnerability

Unauthenticated Stored Cross-Site Scripting via 'Biographical Info' Meta Field vulnerability discovered by daroo in WordPress Plugin Profile Builder versions = 3.15.7...

GHSA-P498-V437-472G

creationtimestamp| type| source ---|---|--- 2026-09-08 06:19:12+00:00| seen| https://gist.github.com/citadelculture/59ba3685c4ac125fd240e01b8fcee60a 2026-09-08 06:19:13+00:00| seen| https://gist.github.com/citadelculture/5ad0a838a902eb1cbf2ff2ff33472c61 2026-09-08 06:19:13+00:00| seen|...

CVE-2026-75809

Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and disabling device functionality by bypassing driver authentication and using IOCTLs to read from and write to PCIe configuration space.Refer to the ' Security Update for Armoury...

CVE-2026-16006

Exposure of Sensitive System Information to an Unauthorized Control Sphere in Armoury Crate driver allows a local user to obtain kernel virtual addresses via a crafted IOCTL request by bypassing the driver's verification, potentially providing further insight into the kernel memory layout.Refer t...

kernel: nvmet-rdma: handle inline data with a nonzero offset

A flaw was found in the nvmet-rdma component of the Linux kernel. This vulnerability arises from incorrect handling of inline data with a non-zero offset, which can lead to an integer underflow. An attacker could exploit this to cause the system to read beyond its allocated memory, potentially...

CVE-2026-16006

CVE-2026-16006 is an exposure of sensitive system information vulnerability in the ASUS Armoury Crate driver . A local user with low privileges can send a crafted IOCTL request that bypasses the driver's verification mechanism, allowing them to obtain kernel virtual addresses and gain insight int...

CVE-2026-76967

creationtimestamp| type| source ---|---|--- 2026-09-08 02:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muxwh5e3xh2b...

CVE-2026-58240

creationtimestamp| type| source ---|---|--- 2026-09-08 00:48:53+00:00| seen| https://bsky.app/profile/suriq.io/post/3muxsgolk5j2r 2026-09-08 02:07:22+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muxwszdd352g 2026-09-08 04:02:24+00:00| seen|...

CVE-2026-86538

creationtimestamp| type| source ---|---|--- 2026-09-08 00:04:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muxpxaxrxg2b 2026-09-18 17:00:28+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/58eb925f-807c-4a80-aebc-629f77cefdae...

CVE-2026-86542

creationtimestamp| type| source ---|---|--- 2026-09-08 00:03:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muxpux7hsz22 2026-09-08 10:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muyrs6o7z42n...

PT-2026-88553

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A confused deputy issue in BackgroundFetch allows a remote attacker who has compromised the renderer process to leak sensitive information through a crafted HTML page. A confused deputy...

VulnCheck KEV: CVE-2017-5753

Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis...

PT-2026-88690

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Improper input validation in the Passwords component allows a remote attacker to potentially leak sensitive information through the use of crafted network traffic. Recommendations Updat...

PT-2026-88705

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Missing authorization in the Contacts component allows a remote attacker to potentially obtain sensitive information. This requires the attacker to have already compromised the renderer...

PT-2026-87279

Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally...

EulerOS 2.0 SP12 : kernel (EulerOS-SA-2026-3270)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : dlm: validate length in dlmsearchrsbtreeCVE-2026-43125 net: annotate data-races around sk-skdataready,writespaceCVE-2026-23302 netfilter: ctnetlin...

PT-2026-88504

Impact The Git node validated the repository that a fetch or pull targeted, but setUpstream wrote a branch..remote value into the repository's own configuration without validating it. A subsequent fetch or pull resolved the remote from that configuration rather than from the checked parameter, so...

PT-2026-87917

Exposure of private personal information to an unauthorized actor in Windows Biometric Service allows an authorized attacker to disclose information locally...

PT-2026-87749

Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally...

PT-2026-88218

Name of the Vulnerable Software and Affected Versions MediaProvider affected versions not specified Description A permissions bypass in the getQueryBuilderInternal function within MediaProvider.java allows for the retrieval of location metadata. This issue enables local information disclosure...