CVE-2024-12145

creationtimestamp| type| source ---|---|--- 2026-09-12 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mvcynyuzx52e...

CVE-2024-6366

Para crear un módulo de Metasploit para explotar la vulnerabilidad RCE en el plugin User Profile Builder de WordPress anterior a la versión 3.11.8, necesitamos aprovechar la falta de autorización adecuada en la funcionalidad de carga de archivos multimedia. Así es como puedes crear dicho módulo d...

CVE-2026-87759

creationtimestamp| type| source ---|---|--- 2026-09-12 07:30:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/117256894812339509 2026-09-12 07:30:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mvckqembwm24 2026-09-12 18:00:26+00:00| seen|...

CVE-2026-15253

CVE-2026-15253 Easy Media Replace = 0.2.0 - Cross-Site Scripting Almacenado Autenticado Author+ Descripción El plugin Easy Media Replace es vulnerable a Cross-Site Scripting Almacenado XSS a través del título del archivo adjunto multimedia. Cuando un Author renombra un archivo multimedia utilizan...

CVE-2026-81000

creationtimestamp| type| source ---|---|--- 2026-09-12 01:30:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/117255479208869871 2026-09-12 01:30:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mvbwmmuy522h...

CVE-2026-89266

creationtimestamp| type| source ---|---|--- 2026-09-12 01:00:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvbuw5vi5k2v 2026-09-12 01:40:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/g4lusr4jim5zw 2026-09-12 04:02:16+00:00| seen|...

CVE-2026-89522

A flaw was found in the Linux kernel's media subsystem, specifically within the ipu7 driver. When an error occurs during the device's initial setup probe error path, a V4L2 asynchronous notifier is not correctly removed from a global list. This results in a use-after-free vulnerability, where the...

Linux Distros Unpatched Vulnerability : CVE-2026-89522

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: staging/ipu7: fix async notifier UAF on probe error path isysregisterdevices registers the V4L2 async notifier via isysnotifierinit. If a subsequent prob...

CVE-2026-54258 Cross-monitor event media authorization bypass in direct event media endpoints

ZoneMinder is a free, open source closed-circuit television software application. Versions prior to 1.36.39, 1.38.4, and 1.39.11 allow an authenticated low-privileged user with coarse Events=View and/or Snapshots=View permissions to directly fetch media for events belonging to monitors they are n...

CVE-2026-54258

ZoneMinder , a free open-source closed-circuit television (CCTV) application, is affected by an authorization bypass in direct event media endpoints. In versions prior to 1.36.39 , 1.38.4 , and 1.39.11 , an authenticated low-privileged user holding only coarse Events=View and/or Snapshots=View pe...

Shopper: Media sub-form store() still lacks authorization (Incomplete fix for GHSA-h4mp-g9c6-xwph)

Title Missing authorization on Media sub-form store action allows unpermissioned product media update Description A lack of authorization control on the store method was found in packages/admin/src/Livewire/Components/Products/Form/Media.php. The security fix released for GHSA-h4mp-g9c6-xwph adde...

GHSA-99H5-JHH7-V3R3 Shopper: Media sub-form store() still lacks authorization (Incomplete fix for GHSA-h4mp-g9c6-xwph)

Title Missing authorization on Media sub-form store action allows unpermissioned product media update Description A lack of authorization control on the store method was found in packages/admin/src/Livewire/Components/Products/Form/Media.php. The security fix released for GHSA-h4mp-g9c6-xwph adde...

DEBIAN-CVE-2026-89741

In the Linux kernel, the following vulnerability has been resolved: Revert "media: v4l2-dev: fix error handling in videoregisterdevice" This reverts commit 2a934fdb01db6458288fc9386d3d8ceba6dd551a. The intentions of that patch were good, but it doesn't work. The idea is that if deviceregister...

AZL-100433 CVE-2026-89741 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: Revert "media: v4l2-dev: fix error handling in videoregisterdevice" This reverts commit 2a934fdb01db6458288fc9386d3d8ceba6dd551a. The intentions of that patch were good, but it doesn't work. The idea is that if deviceregister...

CVE-2026-9160

Improper neutralization of special elements used in a template engine vulnerability in Arma Digital Media Inc. Website Template allows Code Injection. This issue affects Website Template: through 11092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

EUVD-2026-76158

Improper neutralization of special elements used in a template engine vulnerability in Arma Digital Media Inc. Website Template allows Code Injection. This issue affects Website Template: through 11092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2026-75651

creationtimestamp| type| source ---|---|--- 2026-09-11 16:41:30+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mvaz2tpfwb2w...

CVE-2023-4634

CVE-2023-4634 RCE Exploit for Wordpress Plugin Media-Library Plugin 3.10 CVE-2023-4634 Info Patrowl discovered An unauthenticated RCE Vulnerability on Media-Librairy-Assistant Wordpress Plugin in version 3.10. The exploit is not trivial and requires just a little setup explained bellow. Global...

CVE-2024-11222

creationtimestamp| type| source ---|---|--- 2026-09-11 14:00:11+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvaq2esev62q...

CVE-2026-80873

creationtimestamp| type| source ---|---|--- 2026-09-11 14:00:02+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvaq247sx62v 2026-09-11 14:00:06+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117252764621390570...