OESA-2026-2384 trafficserver security update

Apache Traffic Server is an OpenSource HTTP / HTTPS / HTTP/2 / QUIC reverse, forward and transparent proxy and cache. Security Fixes: A bug in POST request handling causes a crash under a certain condition. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.1, from 9.0.0 through...

OESA-2026-2383 trafficserver security update

Apache Traffic Server is an OpenSource HTTP / HTTPS / HTTP/2 / QUIC reverse, forward and transparent proxy and cache. Security Fixes: A bug in POST request handling causes a crash under a certain condition. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.1, from 9.0.0 through...

CVE-2026-43490

creationtimestamp| type| source ---|---|--- 2026-05-22 13:05:30+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmgyri3mmq2x...

CVE-2026-43088

creationtimestamp| type| source ---|---|--- 2026-05-22 13:05:30+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmgyri3mmq2x 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601...

CVE-2026-7798

creationtimestamp| type| source ---|---|--- 2026-05-22 13:02:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgylmkdyf2e...

CVE-2026-5072

creationtimestamp| type| source ---|---|--- 2026-05-22 10:18:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgphbdra32p...

CVE-2026-7615

The Widget Context plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.3. This is due to missing or incorrect nonce validation on the savewidgetcontextsettings function. This makes it possible for unauthenticated attackers to modify widget...

Malicious code in @pisell/pisellos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e11b6f8e400f4de371e79ce547444daf3787d6217037ea2e8d05c8ba86cbfbb2 The package advertises itself as a point-of-sale / venue-booking SDK, but its ScanOrderImpl and VenueBookingImpl solution classes register a default...

EUVD-2026-31415

The Widget Context plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.3. This is due to missing or incorrect nonce validation on the savewidgetcontextsettings function. This makes it possible for unauthenticated attackers to modify widget...

CVE-2026-7615

The CVE-2026-7615 entry concerns the WordPress Widget Context plugin (versions ≤ 1.3.3). Vulnerability: Cross-Site Request Forgery due to missing or incorrect nonce validation in save_widget_context_settings, allowing unauthenticated attackers to modify widget visibility context settings stored i...

MAL-2026-4387 Malicious code in @euqns/nudge-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b1e494fee8148b95f98e5de04cc4ecd78ed793ff2d019ae672e2b22d2debc3b The package ships dist/setup.js which performs HTTP POST requests at install time to a hardcoded external endpoint at...

CVE-2026-6864

creationtimestamp| type| source ---|---|--- 2026-05-22 07:13:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgf3hprox2k 2026-05-25 05:49:15+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mmnrs6gp4q2l...

CVE-2026-7509

creationtimestamp| type| source ---|---|--- 2026-05-22 06:58:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgeamfjm22k 2026-05-25 04:25:55+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mmnn56cp2o2s...

CVE-2026-39832

creationtimestamp| type| source ---|---|--- 2026-05-22 06:36:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgd2bheui2t 2026-06-26 14:12:20+00:00| seen| https://gist.github.com/alon710/ef1198280eb29f6a5974c2c64ac1ec7a 2026-07-15 16:40:08+00:00| seen|...

CVE-2026-39833

creationtimestamp| type| source ---|---|--- 2026-05-22 06:18:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgbzgl2hw2k 2026-05-22 20:40:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116620160885281925 2026-07-15 16:40:08+00:00| seen|...

CVE-2026-3481

The WP Blockade plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'shortcode' parameter in all versions up to and including 0.9.14. This is due to insufficient input sanitization and output escaping in the rendershortcodepreview function. The function receives user inpu...

CVE-2026-3481

The CVE-2026-3481 entry concerns the WP Blockade WordPress plugin (versions

CVE-2026-3481 WP Blockade <= 0.9.14 - Reflected Cross-Site Scripting via 'shortcode' Parameter

The WP Blockade plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'shortcode' parameter in all versions up to and including 0.9.14. This is due to insufficient input sanitization and output escaping in the rendershortcodepreview function. The function receives user inpu...

CVE-2026-34911

creationtimestamp| type| source ---|---|--- 2026-05-22 04:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmg2dhtakh2s 2026-05-26 16:30:06+00:00| seen| https://t.me/truesecator/8245 2026-05-27 06:38:42+00:00| seen|...

CVE-2026-25607

creationtimestamp| type| source ---|---|--- 2026-05-22 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/05/CVE-2026-25606 2026-05-22 12:56:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgybe5ykk2p...