CVE-2026-8212

creationtimestamp| type| source ---|---|--- 2026-05-10 01:24:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlhlzs5v7u2n...

CVE-2026-45181

creationtimestamp| type| source ---|---|--- 2026-05-10 01:19:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlhlqtpypx2t...

CyberPanel 后置链接漏洞

CyberPanel is a virtual hosting control panel developed by Usman Nasir, which includes DNS and email servers. Version 2.1 of CyberPanel has a post-backlink vulnerability. This vulnerability stems from an issue with the filemanager controller endpoint, where command execution is possible. This cou...

SUSE SLES15 Security Update : python-Django (SUSE-SU-2026:1740-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1740-1 advisory. This update for python-Django fixes the following issues - CVE-2026-3902: headers spoofing by exploiting an ambiguous mapping of two header...

WordPress plugin Netroics Blog Posts Grid 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2026-39483

Name of the Vulnerable Software and Affected Versions Jetpack version 9.1 Description A reflected cross-site scripting issue allows unauthenticated attackers to inject malicious scripts into victim browsers. This is achieved by manipulating the post id parameter within the "grunion-form-view.php"...

WordPress plugin Jetpack 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

PT-2026-39514

Evolution CMS 3.1.6 contains a remote code execution vulnerability that allows authenticated users with module creation permissions to execute arbitrary system commands by injecting PHP code into module parameters. Attackers can send POST requests to /manager/index.php with malicious PHP code in...

WordPress plugin Ultimate Product Catalog 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2026-39506

Balbooa Joomla Forms Builder 2.0.6 contains an unauthenticated SQL injection vulnerability in the form submission handler that allows remote attackers to execute arbitrary SQL queries. Attackers can send POST requests to the com baforms component with malicious JSON payloads in the 'id' field...

PT-2026-39524

Advanced Guestbook 2.4.4 contains a persistent cross-site scripting vulnerability in the smilies administration interface that allows authenticated attackers to inject malicious scripts by manipulating the s emotion parameter. Attackers can submit POST requests to admin.php with JavaScript code i...

PT-2026-39503

WordPress Plugin WP Symposium Pro 2021.10 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by exploiting insufficient sanitization of the forum name parameter. Attackers can submit POST requests to the admin setup page with...

CVE-2026-43943

creationtimestamp| type| source ---|---|--- 2026-05-09 22:05:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlhavjnnhp2s...

CVE-2026-42571

creationtimestamp| type| source ---|---|--- 2026-05-09 21:49:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlh7zev7at2t 2026-05-10 00:00:43+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mlhhd4dhnd2p 2026-05-10 00:01:03+00:00| seen|...

CVE-2026-8193

creationtimestamp| type| source ---|---|--- 2026-05-09 21:23:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlh6j67kg32e...

CVE-2026-42224

creationtimestamp| type| source ---|---|--- 2026-05-09 19:54:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlgzlgsxhl2k...

centipede

centipede Self-replicating Linux worm framework with multi-la...

CVE-2026-8188

creationtimestamp| type| source ---|---|--- 2026-05-09 18:40:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlgvgaq6mk2n...

CVE-2026-8198

creationtimestamp| type| source ---|---|--- 2026-05-09 15:05:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlgjfi7j3n2i 2026-05-10 01:36:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116547714758316244 2026-05-11 01:33:05+00:00| seen|...

OESA-2026-2216 python-django security update

A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fixes: An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29. Race condition in file-system storage and file-based cache backends in Django allows an attacker ...