CVE-2026-0711

A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50ABVY.7.1C0 could allow an authenticated, adjacent attacker with administrator privileges to execute OS commands on an affected device...

CVE-2026-0711

A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50ABVY.7.1C0 could allow an authenticated, adjacent attacker with administrator privileges to execute OS commands on an affected device...

CVE-2026-41605

creationtimestamp| type| source ---|---|--- 2026-04-28 01:42:47+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkjhgmbnzi2m 2026-04-28 15:10:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkkulfbutb2h...

CVE-2026-7204

creationtimestamp| type| source ---|---|--- 2026-04-28 01:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116479743048315445 2026-04-28 01:44:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkjhishfjn2r 2026-04-28 02:00:31+00:00| seen|...

CVE-2026-30350

An issue in the /store/items/search endpoint of Agent Protocol server commit e9a89f allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2026-41636

creationtimestamp| type| source ---|---|--- 2026-04-28 01:07:48+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkjfhzx67s2m...

WordPress plugin Social Post Embed 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

PT-2026-35660

The Social Post Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Threads embed handler in all versions up to, and including, 2.0.1. This is due to insufficient input sanitization and output escaping on the user-supplied URL. This makes it possible for authenticated...

PT-2026-36215

Уязвимость функции fromNatlimitof демона httpd микропрограммного обеспечения маршрутизаторов Tenda F456 связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании или выполнить произвольный код пут...

PT-2026-35645

A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50ABVY.7.1C0 could allow an authenticated, adjacent attacker with administrator privileges to execute OS commands on an affected device...

Code-Projects Coaching Management System 注入漏洞

The Code-Projects Coaching Management System is an open-source coaching management system developed by Code-Projects. Version 1.0 of the Code-Projects Coaching Management System has a SQL injection vulnerability. This vulnerability stems from the complaintreply parameter in the...

CVE-2026-22007

creationtimestamp| type| source ---|---|--- 2026-04-27 23:06:21+00:00| seen| https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3mkj6ogcetp22...

CVE-2026-6357

creationtimestamp| type| source ---|---|--- 2026-04-27 20:57:33+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkixil2wqr2j 2026-05-07 12:00:58+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mlb66cgbnt23...

CVE-2026-31666

creationtimestamp| type| source ---|---|--- 2026-04-27 20:00:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkiucd2w242g 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601...

JLSEC-2026-271 Issue summary: An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key exchange...

Issue summary: An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key exchange group when its key exchange group configuration includes the default by using the 'DEFAULT' keyword. Impact summary: A less preferred key exchange may be used even when a more preferred group is...

WordPress Social Post Embed plugin <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by hxuu in WordPress Plugin Social Post Embed versions = 2.0.1...

CVE-2026-30350

An issue in the /store/items/search endpoint of Agent Protocol server commit e9a89f allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2026-42612

creationtimestamp| type| source ---|---|--- 2026-04-27 12:16:04+00:00| published-proof-of-concept| https://github.com/getgrav/grav/security/advisories/GHSA-9695-8fr9-hw5q 2026-05-11 16:59:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllqph7f7n2k 2026-05-24...

CVE-2026-42607

creationtimestamp| type| source ---|---|--- 2026-04-27 12:14:32+00:00| published-proof-of-concept| https://github.com/getgrav/grav/security/advisories/GHSA-w48r-jppp-rcfw 2026-05-11 17:04:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllqxvaxcy26...

CVE-2026-42843

creationtimestamp| type| source ---|---|--- 2026-04-27 12:14:07+00:00| published-proof-of-concept| https://github.com/getgrav/grav/security/advisories/GHSA-r945-h4vm-h736 2026-05-11 17:27:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllsb23yqb2e 2026-05-11...