CVE-2026-45258

creationtimestamp| type| source ---|---|--- 2026-06-27 10:16:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpba5c52vm27...

CVE-2026-9233

creationtimestamp| type| source ---|---|--- 2026-06-27 10:05:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpb7il7qax2p 2026-06-27 22:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpcid6qqmv2x 2026-06-27 22:16:07+00:00| seen|...

CVE-2026-11364

creationtimestamp| type| source ---|---|--- 2026-06-27 10:00:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpb7ajukvi2d 2026-06-27 23:16:11+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpclomo2ch2h...

CVE-2026-10820

creationtimestamp| type| source ---|---|--- 2026-06-27 09:55:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpb6wg555k2q...

HID: usbhid: fix deadlock in hid_post_reset()

...

CVE-2026-9677

creationtimestamp| type| source ---|---|--- 2026-06-27 07:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpawti42vq2g 2026-06-27 10:10:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpb7rx3jze23...

CVE-2026-13295 Page Builder by SiteOrigin <= 2.34.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via panels_data Parameter

The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via panelsdata Parameter in all versions up to, and including, 2.34.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

EUVD-2026-39955

The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via panelsdata Parameter in all versions up to, and including, 2.34.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

MAL-2026-6545 Malicious code in crossmint-wallets-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd4caebfba35b43bf10f156fe687f455e95b09a514b8644fe1a900b63f1bf78a Package name impersonates the Crossmint wallet SDK family. Both preinstall.js and index.js import childprocess, capture host identifiers hostname is...

CVE-2025-60466

creationtimestamp| type| source ---|---|--- 2026-06-27 03:37:47+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpajtif47i2y 2026-06-30 00:07:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphphyuczd2q...

CVE-2025-60467

creationtimestamp| type| source ---|---|--- 2026-06-27 03:32:46+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpajkjapgq2v 2026-06-28 02:30:49+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3mpcwkncjr422 2026-06-29 23:49:46+00:00| seen|...

CVE-2026-13335

The CodePeople Post Map for Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'cpmpoint' Post Meta in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-13335

The CodePeople Post Map for Google Maps WordPress plugin is vulnerable to Stored XSS via the 'cpm_point' Post Meta in all versions up to 1.2.6 due to insufficient input sanitization and output escaping. Authenticated attackers with Contributor-level access or higher can inject arbitrary scripts t...

CVE-2026-13335 CodePeople Post Map for Google Maps <= 1.2.6 - Authenticated (Contributor +) Stored Cross-Site Scripting via 'cpm_point' Post Meta

The CodePeople Post Map for Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'cpmpoint' Post Meta in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-13335

The CodePeople Post Map for Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'cpmpoint' Post Meta in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-13335 CodePeople Post Map for Google Maps <= 1.2.6 - Authenticated (Contributor +) Stored Cross-Site Scripting via 'cpm_point' Post Meta

The CodePeople Post Map for Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'cpmpoint' Post Meta in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

EUVD-2026-39929

The CodePeople Post Map for Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'cpmpoint' Post Meta in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

[SECURITY] Fedora 44 Update: nginx-1.30.3-1.fc44

Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 and IMAP protocols, with a strong focus on high concurrency, performance and low memory usage...

CVE-2026-13335: Improper Neutralization of Input During Web Page Generation

The CodePeople Post Map for Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'cpmpoint' Post Meta in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

PT-2026-53057

Name of the Vulnerable Software and Affected Versions Frisbii Pay versions prior to 1.9.0 Description Authenticated users with Subscriber-level access and above can perform unauthorized modification of data. This is caused by missing capability checks in the upload csv and process batch functions...