CVE-2026-57812

creationtimestamp| type| source ---|---|--- 2026-07-13 19:44:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkhdomdzp2a 2026-07-14 02:30:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mql5yuredv2f 2026-07-16 08:17:48+00:00| seen|...

CVE-2026-14906

creationtimestamp| type| source ---|---|--- 2026-07-13 19:43:18+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqkhap3uhf2c 2026-07-15 14:15:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqovtojixm2h 2026-08-13 13:10:03+00:00| seen|...

CVE-2026-49971

creationtimestamp| type| source ---|---|--- 2026-07-13 19:39:15+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqkgzgn7hj2j...

CVE-2026-12385

The Smart Slider 3 plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.5.1.37 via the 'keyword' parameter. This makes it possible for authenticated attackers, with contributor-level access and above, to extract titles and full content...

CVE-2026-12385 Smart Slider 3 <= 3.5.1.37 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via WP_Query Parameter Injection via 'keyword' Parameter

The Smart Slider 3 plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.5.1.37 via the 'keyword' parameter. This makes it possible for authenticated attackers, with contributor-level access and above, to extract titles and full content...

CVE-2026-12385

CVE-2026-12385 affects the Smart Slider 3 WordPress plugin up to version 3.5.1.37. The issue is a Sensitive Information Exposure via the keyword parameter, enabling authenticated attackers with contributor-level access and above to extract titles and full content excerpts from private, draft, pen...

EUVD-2026-43526

The Smart Slider 3 plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.5.1.37 via the 'keyword' parameter. This makes it possible for authenticated attackers, with contributor-level access and above, to extract titles and full content...

CVE-2026-57790

creationtimestamp| type| source ---|---|--- 2026-07-13 19:28:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkggxwtys2y 2026-07-16 08:07:55+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrryjq5723...

CVE-2026-57363

creationtimestamp| type| source ---|---|--- 2026-07-13 18:51:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkeecjaem2a 2026-07-14 01:19:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mql224uclj2w 2026-07-16 08:15:38+00:00| seen|...

CVE-2026-6875

creationtimestamp| type| source ---|---|--- 2026-07-13 18:47:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqke4twobm25 2026-07-13 19:37:52+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqkgwy6vga2p 2026-07-13 19:50:05+00:00| seen|...

CVE-2026-55420

creationtimestamp| type| source ---|---|--- 2026-07-13 18:29:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkd52uats2y 2026-07-16 08:05:31+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrnq77i22n 2026-10-07 16:37:26+00:00| seen|...

CVE-2026-35211

creationtimestamp| type| source ---|---|--- 2026-07-13 18:26:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkcxnhopi2i...

CVE-2026-0238

creationtimestamp| type| source ---|---|--- 2026-07-13 17:50:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkaxfclq42w 2026-07-16 08:04:05+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrl5x6vl2y...

CVE-2026-45579

creationtimestamp| type| source ---|---|--- 2026-07-13 17:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqkahvtkce22 2026-09-15 20:08:23+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlgihuklt2w...

CVE-2026-13243

creationtimestamp| type| source ---|---|--- 2026-07-13 17:38:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqkaasnkwj2f...

Malicious code in node-sysmon-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 612887c8528ff96b3bc3a61d678b6376099480c080d2d8a0960fe7798ac25f33 On module load, index.js reconstructs a hex-encoded URL Buffer.from'687474703a2f2f3135322e35332e3132302e39302f636d64','hex' that decodes to...

CVE-2026-13237

creationtimestamp| type| source ---|---|--- 2026-07-13 17:34:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqk7zm334g2v...

CVE-2026-13236

creationtimestamp| type| source ---|---|--- 2026-07-13 17:32:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqk7w2sdkl2b 2026-07-21 04:45:08+00:00| seen| https://jvn.jp/en/jp/JVN20592637...

CVE-2026-13233

creationtimestamp| type| source ---|---|--- 2026-07-13 17:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqk7sj363e2h 2026-07-22 17:00:05+00:00| seen| Telegram/q3tIaYx4agFM3da1rV7jtAQTpWs9uwXUcQ2UZM8hUpw4XQ 2026-07-22 17:00:05+00:00| seen|...

Cross-site Scripting (XSS)

Overview nukeviet/nukeviet is a the first opensource CMS in Vietnam. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the COMMENT.postname template variable, which is interpolated without proper JavaScript-context escaping into an inline onclick handler. An attacke...