CVE-2026-40537

creationtimestamp| type| source ---|---|--- 2026-04-24 13:35:12+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkanes5drn2e...

CVE-2026-40540

creationtimestamp| type| source ---|---|--- 2026-04-24 13:35:12+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkanes5drn2e...

CVE-2026-40534

creationtimestamp| type| source ---|---|--- 2026-04-24 13:35:12+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkanes5drn2e...

CVE-2026-40535

creationtimestamp| type| source ---|---|--- 2026-04-24 13:35:12+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkanes5drn2e...

CVE-2026-40531

creationtimestamp| type| source ---|---|--- 2026-04-24 13:35:11+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkanes5drn2e...

CVE-2026-42264

creationtimestamp| type| source ---|---|--- 2026-04-24 13:06:33+00:00| published-proof-of-concept| https://github.com/axios/axios/security/advisories/GHSA-q8qp-cvcw-x6jj 2026-05-08 04:56:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcwwkxb5g2h 2026-05-08 12:01:34+00:00| seen|...

CVE-2026-4313

AdaptiveGRC is vulnerable to Stored XSS via text type fields across the forms. Authenticated attacker can replace the value of the text field in the HTTP POST request. Improper parameter validation by the server results in arbitrary JavaScript execution in the victim's browser. Critically, this...

CVE-2026-4313 Stored XSS in AdaptiveGRC

AdaptiveGRC is vulnerable to Stored XSS via text type fields across the forms. Authenticated attacker can replace the value of the text field in the HTTP POST request. Improper parameter validation by the server results in arbitrary JavaScript execution in the victim's browser. Critically, this...

CVE-2026-1950

creationtimestamp| type| source ---|---|--- 2026-04-24 08:14:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mka3hjof4t2n 2026-04-24 09:16:19+00:00| published-proof-of-concept| Telegram/X1JyBiiNxoSYu-ldDRrQFjaq89QLca8O12-lN-DTEtiPeU 2026-05-11 19:37:07+00:00| seen|...

CVE-2026-3362

creationtimestamp| type| source ---|---|--- 2026-04-24 07:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mk7z5cil2m2h...

CVE-2026-1951

creationtimestamp| type| source ---|---|--- 2026-04-24 07:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116458509219616758 2026-04-24 07:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mk7yyn3gto2v 2026-04-24 08:14:21+00:00| seen|...

CVE-2026-1949

creationtimestamp| type| source ---|---|--- 2026-04-24 06:42:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk7wcyzbd22n 2026-04-24 07:15:43+00:00| seen| Telegram/wWQtDkhRnA9qn3zMxBPWcdzUosuSeXfPexeyw8Vo0UIcA 2026-04-24 07:55:46+00:00| seen|...

CVE-2026-5364

creationtimestamp| type| source ---|---|--- 2026-04-24 06:42:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk7wcrsxiu2f 2026-04-24 07:15:43+00:00| seen| Telegram/wWQtDkhRnA9qn3zMxBPWcdzUosuSeXfPexeyw8Vo0UIcA 2026-04-24 07:57:11+00:00| seen|...

CVE-2026-42313

creationtimestamp| type| source ---|---|--- 2026-04-24 06:09:54+00:00| published-proof-of-concept| https://github.com/pyload/pyload/security/advisories/GHSA-pg67-9wjv-mr85 2026-05-11 18:25:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllviz63oy2n 2026-05-11...

CVE-2026-5347 WP Books Gallery <= 4.8.0 - Missing Authorization to Unauthenticated Settings Update via 'permalink_structure' Parameter

The HM Books Gallery plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 4.8.0. This is due to the absence of capability checks and nonce verification in the admininit hook that handles the permalink settings update at line 205-209 of wp-books-gallery.php...

CVE-2026-5347

The HM Books Gallery WordPress plugin is affected up to version 4.8.0 by Missing Authorization to unauthenticated settings updates. The vulnerability resides in the admin_init hook that processes permalink settings updates (lines around 205–209 in wp-books-gallery.php), where the code only checks...

EUVD-2026-25398

The HM Books Gallery plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 4.8.0. This is due to the absence of capability checks and nonce verification in the admininit hook that handles the permalink settings update at line 205-209 of wp-books-gallery.php...

CVE-2026-41068

creationtimestamp| type| source ---|---|--- 2026-04-24 05:18:58+00:00| seen| Telegram/kIuLSWSF-lSSH53f04z2OEjKv8ykvXtTNiYc9dOAOt4c 2026-04-24 05:46:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk7t5usvb52w...

CVE-2026-41317

Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service SaaS.press.api.account.createapisecret is prone to CSRF-like exploits. This endpoint writes to database and it is also accessible via GET method. The patch in commit...

CVE-2026-23902

creationtimestamp| type| source ---|---|--- 2026-04-24 03:05:46+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mk7k7cbd5q2u 2026-04-24 22:01:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkbjnkyle32z...