CVE-2026-42812

creationtimestamp| type| source ---|---|--- 2026-05-04 18:02:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2ax33zfg2n 2026-05-04 19:16:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2f4db6kr2i...

CVE-2026-42810

creationtimestamp| type| source ---|---|--- 2026-05-04 18:01:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2avc356h2k 2026-05-04 19:21:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2ffbqa2m2r...

CVE-2026-42809

creationtimestamp| type| source ---|---|--- 2026-05-04 18:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2av2pacn2r 2026-05-04 19:06:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2ekgftrk2p 2026-05-12 14:07:07+00:00| seen|...

CVE-2026-29169

creationtimestamp| type| source ---|---|--- 2026-05-04 17:44:16+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ml27xfrq6y2i 2026-05-04 19:07:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2emvwpnx2w 2026-05-05 00:01:51+00:00| seen|...

EUVD-2026-27045

Easy PayPal Events & Tickets plugin for WordPress version 1.3 and earlier contain a hardcoded authentication bypass vulnerability in the QR code scanning functionality that allows unauthenticated remote attackers to bypass hash verification by supplying 'test' as the hash parameter. Attackers can...

CVE-2026-44029

creationtimestamp| type| source ---|---|--- 2026-05-04 16:16:07+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-44029 2026-05-05 02:26:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml3553mwuy2e...

CVE-2026-34032

creationtimestamp| type| source ---|---|--- 2026-05-04 14:36:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkzvgvdzgm2i 2026-05-04 17:36:15+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ml27j2ah5e2u 2026-05-05 00:01:50+00:00| seen|...

WordPress Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories plugin <= 4.10.0 - Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting vulnerability discovered by zaim in WordPress Plugin Post Expirator versions = 4.10.0...

JLSEC-2026-410

An information disclosure vulnerability exists in curl v8.1.0 when doing HTTPS transfers, libcurl might erroneously use the read callback CURLOPTREADFUNCTION to ask for data to send, even when the CURLOPTPOSTFIELDS option has been set, if the same handle previously wasused to issue a PUT request...

JLSEC-2026-428 When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a...

When an OAuth2 bearer token is used for an HTTPS transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new target host...

JLSEC-2026-396

When doing HTTPS transfers, libcurl might erroneously use the read callback CURLOPTREADFUNCTION to ask for data to send, even when the CURLOPTPOSTFIELDS option has been set, if the same handle previously was used to issue a PUT request which used that callback. This flaw may surprise the...

CVE-2026-43824

creationtimestamp| type| source ---|---|--- 2026-05-04 12:07:36+00:00| seen| https://bsky.app/profile/vitobotta.com/post/3mkzn5epw4222 2026-05-07 17:42:01+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3mlbra55xeh25 2026-05-07 17:47:07+00:00| seen|...

CVE-2026-7746

creationtimestamp| type| source ---|---|--- 2026-05-04 11:26:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkzkte4uqu2t...

CVE-2026-7745

creationtimestamp| type| source ---|---|--- 2026-05-04 11:21:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkzkkfokvh2i...

CVE-2026-7738

creationtimestamp| type| source ---|---|--- 2026-05-04 11:11:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkzjyicqro2o...

CVE-2026-7736

creationtimestamp| type| source ---|---|--- 2026-05-04 10:56:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkzj6vorbq2o...

CVE-2026-7740

creationtimestamp| type| source ---|---|--- 2026-05-04 10:41:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkziddwljr2n...

CLSA-2026-1777891107 python3.11: Fix of CVE-2026-4786

CVE-2026-4786: fix webbrowser %action substitution bypass of the dash-prefix safety check by validating the post-substitution URL and expanding %action before %s in UnixBrowser argument assembly...

CVE-2026-341431

creationtimestamp| type| source ---|---|--- 2026-05-04 10:13:34+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/broadcom-vmware-security-advisory-av26-419 2026-05-04 15:30:21+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkzyhwb6zh27...

CVE-2025-14320

creationtimestamp| type| source ---|---|--- 2026-05-04 09:25:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkze3iqqgx2g 2026-05-04 10:33:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkzhufzyvb2e 2026-05-04 10:37:00+00:00| seen|...