47311 matches found
CVE-2026-32563 WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - PHP Object Injection vulnerability
Subscriber PHP Object Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...
CVE-2026-32563
CVE-2026-32563 is a PHP Object Injection vulnerability in the ACPT (Pro) – Custom Post Types Plugin for WordPress , affecting versions ≤ 2.0.63 . The vulnerability requires Subscriber -level access as stated in the description, though the CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) rates Pr...
CVE-2026-78434
Faveo Helpdesk versions up to 2.0.3 contain a missing authentication flaw in the FormController::post_ticket_reply function within app/Http/Controllers/Client/helpdesk/FormController.php, specifically in the post-ticket-reply Endpoint . An unauthenticated remote attacker can exploit this to achie...
CVE-2026-78434 Faveo Helpdesk post-ticket-reply Endpoint FormController.php post_ticket_reply missing authentication
A flaw has been found in Faveo Helpdesk up to 2.0.3. This impacts the function FormController::postticketreply of the file app/Http/Controllers/Client/helpdesk/FormController.php of the component post-ticket-reply Endpoint. This manipulation causes missing authentication. The attack can be...
CVE-2026-78434 Faveo Helpdesk post-ticket-reply Endpoint FormController.php post_ticket_reply missing authentication
A flaw has been found in Faveo Helpdesk up to 2.0.3. This impacts the function FormController::postticketreply of the file app/Http/Controllers/Client/helpdesk/FormController.php of the component post-ticket-reply Endpoint. This manipulation causes missing authentication. The attack can be...
OPENSUSE-SU-2026:21634-1 Security update for liboqs
This update for liboqs fixes the following issues: Changes in liboqs: Updated to 0.16.0: Deprecation notice: - SPHINCS+ was removed in 0.16.0. Security issues: - Fixed uninitialized encapsderand pointer dereference - CVE-2026-46344, CVE-2026-44518: Fixed out-of-bounds read in XMSS/XMSS^MT signatu...
CVE-2026-71933
creationtimestamp| type| source ---|---|--- 2026-08-24 18:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mttxu67nne2b...
What happens to your data when you die? (Lock and Code S07E17)
This week on the Lock and Code podcast … You will die. Your data will not. The afterlife of our information is a recent phenomenon, and some of the companies with the most to sort through are still just figuring it out. As far back as 2007, Facebook was forced to reckon with mass grief when users...
CVE-2026-76840
creationtimestamp| type| source ---|---|--- 2026-08-24 14:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtti7jp5vh2p...
CVE-2026-78381 RansomLook Arbitrary File Read via Path Traversal in Post screen Field
RansomLook contains a path traversal vulnerability in the handling of the screen field associated with group posts. The GroupPost.get API handler concatenates the database-controlled screen value directly with the application's source/ directory and opens the resulting path without verifying that...
CVE-2026-66671
creationtimestamp| type| source ---|---|--- 2026-08-24 12:55:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fek737drmzoun...
CVE-2026-32551
creationtimestamp| type| source ---|---|--- 2026-08-24 12:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mttdqgolm62j 2026-08-24 14:07:23+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtti2onuro2c...
WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - PHP Object Injection vulnerability
WordPress ACPT Pro - Custom Post Types Plugin for WordPress plugin = 2.0.63 - PHP Object Injection vulnerability discovered by VDsec in WordPress Plugin ACPT Pro - Custom Post Types Plugin for WordPress versions = 2.0.63...
CVE-2026-66587
creationtimestamp| type| source ---|---|--- 2026-08-24 12:06:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ye6egmacr3iu 2026-08-24 12:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mttdqhzsjc25 2026-08-24 14:07:40+00:00| seen|...
WordPress YMC Smart Filter plugin < 3.11.3 - Unauthenticated Private/Draft Post Disclosure vulnerability
Unauthenticated Private/Draft Post Disclosure vulnerability discovered by Ahmed Hashim Ismael in WordPress Plugin Filter & Grids versions 3.11.3...
WordPress Copy & Delete Posts plugin < 1.5.6 - Authenticated Arbitrary Post Content and Password Disclosure vulnerability
Authenticated Arbitrary Post Content and Password Disclosure vulnerability discovered by Erwan LR WPScan in WordPress Plugin Duplicate Post versions 1.5.6...
WordPress Copy & Delete Posts plugin < 1.5.6 - Author+ Password-Protected Post Content Disclosure vulnerability
Author+ Password-Protected Post Content Disclosure vulnerability discovered by Erwan LR WPScan in WordPress Plugin Duplicate Post versions 1.5.6...
CVE-2026-75975
creationtimestamp| type| source ---|---|--- 2026-08-24 10:03:28+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mtt2ghwjcc2b 2026-09-02 17:33:14+00:00| seen| https://gist.github.com/alon710/4dc17918da62d2577fc435c04c7ff596...
CVE-2026-75931
creationtimestamp| type| source ---|---|--- 2026-08-24 09:33:52+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mtsyrka2pk2b 2026-09-02 15:57:39+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mukcg4x6cn2r 2026-09-02 16:31:29+00:00| seen|...