3342 matches found
EUVD-2026-4543
The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the actionimportmodule function in all versions up to, and including, 7.8.9.2. This makes it possible for authenticated attackers, wi...
CVE-2026-22462
Cross-Site Request Forgery CSRF vulnerability in richardevcom Add Polylang support for Customizer add-polylang-support-for-customizer allows Cross Site Request Forgery.This issue affects Add Polylang support for Customizer: from n/a through = 1.4.5...
CVE-2026-22989
creationtimestamp| type| source ---|---|--- 2026-01-23 17:30:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md4a3qx5q72c...
CVE-2026-22275
creationtimestamp| type| source ---|---|--- 2026-01-23 11:40:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md3mjds4is2r...
CGA-5F84-4FXQ-9C2J
Bulletin has no description...
Ubuntu: Security Advisory (USN-7970-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-52758
creationtimestamp| type| source ---|---|--- 2026-01-20 20:03:20+00:00| seen| Telegram/zOxttBEWcLJTn2G6nP1tXqKkQQQmPMmLYPUBKMXm2tspWT0...
CVE-2025-54495
creationtimestamp| type| source ---|---|--- 2026-01-20 15:30:11+00:00| seen| https://infosec.place/objects/e6298a2d-7899-41c3-86b2-15fd5def114b...
MiracleLinux 9 : dotnet7.0-7.0.112-1.el9.ML.1 (AXSA:2023-6508:28)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6508:28 advisory. HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack Rapid Reset Attack CVE-2023-44487 Tenable has extracted the preceding description...
CVE-2025-15535
A security flaw has been discovered in nicbarker clay up to 0.14. This affects the function ClayMeasureTextCached in the library clay.h. The manipulation results in null pointer dereference. The attack is only possible with local access. The exploit has been released to the public and may be used...
WordPress WP Forms Signature Contract Add-On plugin <= 1.8.2 - Broken Access Control to Notice Dismissal vulnerability
Broken Access Control to Notice Dismissal vulnerability discovered by Nabil Irawan in WordPress Plugin WP Forms Signature Contract Add-On versions = 1.8.2...
EUVD-2026-3180
A vulnerability was detected in itsourcecode Society Management System 1.0. Impacted is an unknown function of the file /admin/addactivity.php. Performing a manipulation of the argument Title results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and m...
Black Basta Ransomware Leader Added to EU Most Wanted and INTERPOL Red Notice
Ukrainian and German law enforcement authorities have identified two Ukrainians suspected of working for the Russia-linked ransomware-as-a-service RaaS group Black Basta. In addition, the group's alleged leader, a 35-year-old Russian national named Oleg Evgenievich Nefedov Нефедов Олег Евгеньевич...
EUVD-2026-2945
lucy-xss-filter before commit e5826c0 allows an attacker to execute malicious JavaScript due to improper sanitization caused by misconfigured default superset rule files...
MiracleLinux 4 : coreutils-8.4-46.0.1.AXS4 (AXSA:2017-1611:01)
The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2017-1611:01 advisory. These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages. Security issues fixed with this...
CVE-2026-22912
creationtimestamp| type| source ---|---|--- 2026-01-15 14:23:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mchrvvnxjj22 2026-01-15 15:12:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115899757567671679...
CVE-2026-22640
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2025-71142
creationtimestamp| type| source ---|---|--- 2026-01-14 15:43:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcffvjkldv2x 2026-06-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260602 2026-07-09 00:46:33+00:00| seen...
CVE-2025-15378
creationtimestamp| type| source ---|---|--- 2026-01-14 07:34:51+00:00| seen| https://gist.github.com/Darkcrai86/190a86fa64ada161a3dadb6d949f3db3 2026-01-14 08:08:14+00:00| seen| https://gist.github.com/Darkcrai86/70305d9c1f8ec25efb7932b1bc0959d0...