GHSA-FVCV-HH55-X3R4

creationtimestamp| type| source ---|---|--- 2026-07-29 08:01:20+00:00| seen| https://t.me/nxblog/1758 2026-07-30 00:02:09+00:00| seen| https://t.me/nxblog/1758 2026-08-01 20:00:05+00:00| published-proof-of-concept| https://t.me/nxblog/1758 2026-08-02 00:00:22+00:00| published-proof-of-concept|...

CVE-2026-61826

creationtimestamp| type| source ---|---|--- 2026-07-29 08:01:20+00:00| seen| https://t.me/nxblog/1758 2026-07-30 00:02:09+00:00| seen| https://t.me/nxblog/1758 2026-08-01 20:00:05+00:00| published-proof-of-concept| https://t.me/nxblog/1758 2026-08-02 00:00:22+00:00| published-proof-of-concept|...

GHSA-HQ33-8JGP-8QQ3

creationtimestamp| type| source ---|---|--- 2026-07-29 07:31:46+00:00| seen| https://gist.github.com/alon710/5949a16fe56601aa95656371bd907946...

CVE-2026-63234

creationtimestamp| type| source ---|---|--- 2026-07-29 06:54:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrrdpxnqzd22...

CVE-2026-18197

CVE-2026-18197 affects Link Library prior to 7.9.4. The issue is an improper neutralization of input during web page generation, enabling Cross-Site Scripting (XSS). The connected documents do not provide details on exploited components, versions beyond the affected range, specific root causes be...

CVE-2026-18197

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Link Library allows Cross-Site Scripting XSS. This issue affects Link Library: before 7.9.4...

EUVD-2026-50165

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Link Library allows Cross-Site Scripting XSS. This issue affects Link Library: before 7.9.4...

CVE-2026-18197

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Link Library allows Cross-Site Scripting XSS. This issue affects Link Library: before 7.9.4...

CVE-2026-63227

creationtimestamp| type| source ---|---|--- 2026-07-29 06:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrrdis7ver2v...

GHSA-WG2Q-39H6-66X9

creationtimestamp| type| source ---|---|--- 2026-07-29 06:32:35+00:00| seen| https://gist.github.com/alon710/9b6eb86646df2d26df9c07ebf0051d99...

CVE-2026-17161

creationtimestamp| type| source ---|---|--- 2026-07-29 03:24:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqxzvrrpn2q...

CVE-2026-12939

The Newsletters Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' attribute of the postthumbnail and newsletterspostthumbnail shortcodes in versions up to and including 4.15. This is due to insufficient input sanitization and output escaping in the postthumbnai...

EUVD-2026-50096

The Newsletters Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' attribute of the postthumbnail and newsletterspostthumbnail shortcodes in versions up to and including 4.15. This is due to insufficient input sanitization and output escaping in the postthumbnai...

CVE-2026-12939 Newsletters <= 4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link' Shortcode Attribute

The Newsletters Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' attribute of the postthumbnail and newsletterspostthumbnail shortcodes in versions up to and including 4.15. This is due to insufficient input sanitization and output escaping in the postthumbnai...

GHSA-2XMW-F8J8-WFXC

creationtimestamp| type| source ---|---|--- 2026-07-29 00:31:42+00:00| seen| https://gist.github.com/alon710/3def853e2525c617d6890d62679fbc37...

PT-2026-65692

The PhotoSwipe WordPress plugin through 4.1.1.1 uses the title attribute of author-supplied link markup as a lightbox caption that is written into the page DOM without escaping. Because the title attribute survives the post-content sanitization applied to users who lack the unfiltered html...

ROS-20260729-73-0017

The vulnerability of the Go programming language is related to the incorrect definition of the link before accessing a file. Exploiting this vulnerability can allow an attacker to increase their privileges...

Fedora 43 : kronosnet (2026-56568b6fe8)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-56568b6fe8 advisory. CVE-2026-15811 LOW: encryption key exposure in memory after cryptographic configuration changes. Wipe cryptographic keys with explicitbzero before...

CVE-2026-14958

creationtimestamp| type| source ---|---|--- 2026-07-28 23:34:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrql6dwnqr2i 2026-07-28 23:48:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrqlw6ttae23...

CVE-2026-15064

creationtimestamp| type| source ---|---|--- 2026-07-28 23:24:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqkmgz42s2j 2026-07-30 04:48:01+00:00| seen| https://www.hkcert.org/security-bulletin/ibm-websphere-products-multiple-vulnerabilities20260730...