WordPress plugin Post Expirator 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

Microsoft MMC MSC EvilTwin - Local Admin Creation

!/usr/bin/env python3 Exploit Title: Microsoft MMC MSC EvilTwin - Local Admin Creation Date: 2025-11-22 Author: Mohammed Idrees Banyamer Author Country: Jordan GitHub: https://github.com/mbanyamer Vendor Homepage: https://www.microsoft.com Software Link: N/A built-in Windows component - mmc.exe...

CVE-2026-28388

creationtimestamp| type| source ---|---|--- 2026-04-07 23:31:27+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3miwwr7vxwk2o 2026-04-08 12:10:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3miyb6guojc23 2026-04-09 00:01:12+00:00| seen|...

CVE-2026-28389

creationtimestamp| type| source ---|---|--- 2026-04-07 23:31:27+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3miwwr7vxwk2o 2026-04-08 12:10:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3miyb6guojc23 2026-04-09 00:01:14+00:00| seen|...

CVE-2026-28386

creationtimestamp| type| source ---|---|--- 2026-04-07 23:31:26+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3miwwr7vxwk2o 2026-04-08 12:10:23+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3miyb6guojc23 2026-04-10 23:26:39+00:00| published-proof-of-concept|...

CVE-2026-33439

creationtimestamp| type| source ---|---|--- 2026-04-07 23:20:49+00:00| published-proof-of-concept| Telegram/UCQVBQ1wk3sWuk0eQ1N0bHldnYCTUsbgi6Jx-voi5Wevn8w 2026-04-07 23:21:06+00:00| seen| Telegram/WwaVaWmCpWfeYuJ8P8IqcUlHCUAeEgjmrCmKGvAa3A2q2J0 2026-04-08 01:22:01+00:00| seen|...

CVE-2026-35173

Chyrp Lite is an ultra-lightweight blogging engine. Prior to 2026.01, an IDOR / Mass Assignment issue exists in the Post model that allows authenticated users with post editing permissions Edit Post, Edit Draft, Edit Own Post, Edit Own Draft to modify posts they do not own and do not have...

CVE-2026-35181

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the player skin configuration endpoint at admin/playerUpdate.json.php does not validate CSRF tokens. The plugins table is explicitly excluded from the ORM's domain-based security check via ignoreTableSecurityCheck, removing...

CVE-2026-25776

creationtimestamp| type| source ---|---|--- 2026-04-07 22:00:00+00:00| seen| https://jvn.jp/en/jp/JVN66473735/ 2026-04-08 10:00:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mixzvm5wfr2x 2026-04-08 10:00:29+00:00| seen|...

CVE-2026-39361

creationtimestamp| type| source ---|---|--- 2026-04-07 21:22:19+00:00| seen| Telegram/ORzlugWNJSN1mBT3L8tDKZ1H7oYKkiEmKL9E7e5xnpgHaiU 2026-04-08 06:41:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mixossc4lx25 2026-06-14 14:07:07+00:00| seen|...

CVE-2026-5736

creationtimestamp| type| source ---|---|--- 2026-04-07 21:22:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwpk4ryzd22...

CVE-2026-39347

creationtimestamp| type| source ---|---|--- 2026-04-07 21:12:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwoy7caxq2g...

CVE-2026-39354

creationtimestamp| type| source ---|---|--- 2026-04-07 21:02:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwogcbwh522...

CVE-2026-22711

creationtimestamp| type| source ---|---|--- 2026-04-07 20:52:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwnvl64gk25...

CVE-2026-39888

creationtimestamp| type| source ---|---|--- 2026-04-07 20:48:08+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-qf73-2hrx-xprp 2026-04-07 20:48:08+00:00| published-proof-of-concept|...

CVE-2026-39355

creationtimestamp| type| source ---|---|--- 2026-04-07 20:39:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwn6mn47z25 2026-04-07 21:22:07+00:00| seen| Telegram/G7jwG369FM-EA8JMh95pmFocIEiy10HcnXiWAHgS3Vj404 2026-04-08 07:04:11+00:00| seen|...

CVE-2026-39838

creationtimestamp| type| source ---|---|--- 2026-04-07 20:37:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwn25b2kb27...

CVE-2026-32497

creationtimestamp| type| source ---|---|--- 2026-04-07 20:30:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3miwmn3rdes2h...

CVE-2026-39390

creationtimestamp| type| source ---|---|--- 2026-04-07 20:07:21+00:00| published-proof-of-concept| https://github.com/ci4-cms-erp/ci4ms/security/advisories/GHSA-x3hr-cp7x-44r2 2026-04-08 18:01:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miyut3qg6x2s...

CVE-2026-39392

creationtimestamp| type| source ---|---|--- 2026-04-07 20:07:13+00:00| published-proof-of-concept| https://github.com/ci4-cms-erp/ci4ms/security/advisories/GHSA-fjpj-6qcq-6pw2 2026-04-08 18:16:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miyvnxbmju27...