CVE-2026-10557

creationtimestamp| type| source ---|---|--- 2026-06-11 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-162-01 2026-06-11 16:13:04+00:00| seen| https://bsky.app/profile/boredchilada.bsky.social/post/3mnzmlcnxbg2f 2026-06-14 12:00:22+00:00| seen|...

CVE-2026-42947

creationtimestamp| type| source ---|---|--- 2026-06-11 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-162-02 2026-06-11 16:15:40+00:00| seen| https://bsky.app/profile/boredchilada.bsky.social/post/3mnzmpx4uza2v 2026-06-13 04:37:10+00:00| seen|...

CVE-2026-50245

creationtimestamp| type| source ---|---|--- 2026-06-11 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-162-03 2026-06-11 16:19:00+00:00| seen| https://bsky.app/profile/boredchilada.bsky.social/post/3mnzmvvg32p2f 2026-06-11 20:19:51+00:00| seen|...

MAL-2026-5562 Malicious code in @koadz/sso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d284d5d0421ad906d63959ed4e0f3354106166311f4066ff794669f52d1eacfb package.json declares a postinstall hook that runs dist/index.js. The compiled bundle contains an appended payload absent from the index.ts source...

Malicious code in testzapier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5840f2a3b34d7f32de7243a146ecf85ac875bd1ef09b0ba9a395d08e356084f package.json declares a preinstall hook node index.js that fires automatically on npm install. index.js spawns a shell that runs curl -X POST against...

CVE-2026-8464

creationtimestamp| type| source ---|---|--- 2026-06-11 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-8464 2026-06-11 14:02:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnzfc5iymz2m...

CVE-2026-41706

Spring Security's CookieRequestCache and CookieServerRequestCache store the pre-authentication request URL in a browser cookie so that users can be redirected back to their intended destination after a successful login. In affected versions, the full absolute URL is stored in the cookie and is us...

CVE-2026-48734

creationtimestamp| type| source ---|---|--- 2026-06-11 01:41:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mny3upjzfi2r...

CVE-2026-53464

creationtimestamp| type| source ---|---|--- 2026-06-11 01:22:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mny2s27p3e2v...

CVE-2026-35273

creationtimestamp| type| source ---|---|--- 2026-06-11 00:39:42+00:00| seen| https://www.acn.gov.it/portale/w/rilevata-vulnerabilita-in-oracle-1 2026-06-11 03:02:12+00:00| seen| https://bsky.app/profile/baldanders.info/post/3mnyaf4l2qg2y 2026-06-11 03:02:21+00:00| seen|...

EUVD-2026-36137

Easy Twitter Feeds before 1.2.13 contains a cross-site request forgery vulnerability in the duplicatepost action handler that lacks nonce verification. Attackers can trick an authenticated user into visiting a crafted link that duplicates any post regardless of post type...

EUVD-2026-36141

Yoast Duplicate Post through 4.6 inserts an unescaped post title and permalink into the Classic Editor scheduled republish notice. Attackers can schedule a republish copy with a crafted title to execute script when an administrator views the resulting notice...

EUVD-2026-36140

Yoast Duplicate Post through 4.6 contains a cross-site request forgery vulnerability in the duplicatepostdismissnotice handler, which verifies no nonce or capability. Attackers can trick any authenticated user into sending a request that sets the duplicatepostshownotice site option, suppressing...

CVE-2026-46669

creationtimestamp| type| source ---|---|--- 2026-06-11 00:31:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxxy6qthc2m...

ClipBucket V5 SQL注入漏洞

ClipBucket V5 is a video hosting platform developed by MacWarrior’s individual developers. Versions of ClipBucket V5 prior to 5.5.3 – including version 132 – contained an SQL injection vulnerability. This vulnerability stemmed from the number parameter in the POST /actions/subtitleedit.php reques...

CVE-2026-53742

creationtimestamp| type| source ---|---|--- 2026-06-10 23:22:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxu3uqusn2d...

CVE-2026-53736

creationtimestamp| type| source ---|---|--- 2026-06-10 23:10:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxthio3fs2v...

CVE-2026-53738

Copy & Delete Posts through 1.5.4 lets any plugin-enabled non-admin role invoke every operation in the cdpactionhandling AJAX handler. Attackers with an enabled role can delete posts or overwrite plugin settings via the f parameter, bypassing per-function capability checks...

CVE-2026-53739

Yoast Duplicate Post through 4.6 contains a cross-site request forgery vulnerability in the duplicatepostdismissnotice handler, which verifies no nonce or capability. Attackers can trick any authenticated user into sending a request that sets the duplicatepostshownotice site option, suppressing...

CVE-2026-53740

Yoast Duplicate Post through 4.6 inserts an unescaped post title and permalink into the Classic Editor scheduled republish notice. Attackers can schedule a republish copy with a crafted title to execute script when an administrator views the resulting notice...