MyBB Like Plugin 跨站脚本漏洞

MyBB Like Plugin is an extension for forums developed by MyBB Corporation. Version 3.0.0 of MyBB Like Plugin contains a cross-site scripting vulnerability. This vulnerability arises from the lack of validation of topic content when posts or topics are created, which may allow attackers to inject...

CVE-2016-15058

creationtimestamp| type| source ---|---|--- 2026-04-03 23:25:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimulfblib2t 2026-04-04 01:30:17+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3min3k5xk2c2q...

CVE-2026-27834

creationtimestamp| type| source ---|---|--- 2026-04-03 23:21:15+00:00| published-proof-of-concept| Telegram/6UgEKYpuzuWLxLktBSFu6z7cSh4q5naaHoBaDBfOi0oKaqw 2026-04-10 10:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mj537tvftz2w...

CVE-2026-5485

creationtimestamp| type| source ---|---|--- 2026-04-03 23:21:08+00:00| seen| Telegram/C4IqkAaofmVuG0ts1zoVr23H-sEIs7UsuvOGOq7uR7BrNw 2026-04-04 04:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mindxbbi2t27 2026-06-14 16:07:09+00:00| seen|...

CVE-2026-22664

creationtimestamp| type| source ---|---|--- 2026-04-03 23:20:47+00:00| seen| Telegram/AcNtumNwDk55YBKt0PcSVxzETqOULILyzC0BNrIIoAU4I 2026-04-04 04:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mindxp3i4l2s 2026-06-17 05:37:07+00:00| seen|...

WordPress WCFM - WooCommerce Frontend Manager plugin <= 6.7.25 - Insecure Direct Object References to Authenticated (Vendor+) Arbitrary Post/Product Manipulation vulnerability

WordPress WCFM - WooCommerce Frontend Manager plugin = 6.7.25 - Insecure Direct Object References to Authenticated Vendor+ Arbitrary Post/Product Manipulation vulnerability discovered by Osvaldo Noe Gonzalez Del Rio Os - krei.dev | ogbuilders.io in WordPress Plugin WCFM – Frontend Manager for...

CVE-2026-22661

creationtimestamp| type| source ---|---|--- 2026-04-03 23:11:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimtrsvyy52s 2026-04-03 23:20:47+00:00| seen| Telegram/AcNtumNwDk55YBKt0PcSVxzETqOULILyzC0BNrIIoAU4I 2026-04-04 05:14:35+00:00| seen|...

CVE-2026-34118

A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 in the HTTP POST body parsing logic due to missing validation of remaining buffer capacity after dynamic allocation, due to insufficient boundary validation when handling externally supplied HTTP input. An...

CVE-2026-22665

creationtimestamp| type| source ---|---|--- 2026-04-03 22:41:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mims3hv75b2i 2026-04-03 23:20:47+00:00| seen| Telegram/AcNtumNwDk55YBKt0PcSVxzETqOULILyzC0BNrIIoAU4I 2026-04-04 05:01:02+00:00| seen|...

CVE-2025-58136

A flaw was found in Apache Traffic Server. A remote attacker can exploit a bug in the POST request handling mechanism, which, under certain conditions, causes the server to crash. This vulnerability can lead to a Denial of Service DoS, making the affected service unavailable to legitimate users...

CVE-2026-35533

creationtimestamp| type| source ---|---|--- 2026-04-03 20:29:41+00:00| published-proof-of-concept| https://github.com/jdx/mise/security/advisories/GHSA-436v-8fw5-4mj8 2026-04-03 20:29:41+00:00| published-proof-of-concept| https://github.com/jdx/mise/security/advisories/GHSA-436v-8fw5-4mj8...

CVE-2026-5476

creationtimestamp| type| source ---|---|--- 2026-04-03 20:05:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimjg3nusb22...

GHSA-7R9J-R86Q-7G45

creationtimestamp| type| source ---|---|--- 2026-04-03 17:26:40+00:00| published-proof-of-concept| Telegram/DJsg5Qi7j92DgCP14lqfeXU4IPClBfbIww0fpCMr4ueipk0 2026-04-04 02:48:17+00:00| seen| https://bsky.app/profile/cyber-news-fi.bsky.social/post/3min7vlzl2s2s...

[SECURITY] Fedora 42 Update: gstreamer1-vaapi-1.26.11-1.fc42

A collection of GStreamer plugins to let you make use of VA API video acceleration from GStreamer applications. Includes elements for video decoding, display, encoding and post-processing using VA API subject to hardware limitations...

Axios NPM supply chain incident

Cisco Talos is actively investigating the March 31, 2026 supply chain attack on the official Axios node package manager npm package during which two malicious versions v1.14.1 and v0.30.4 were deployed. Axios is one of the more popular JavaScript libraries with as many as 100 million downloads pe...

CVE-2026-26477

creationtimestamp| type| source ---|---|--- 2026-04-03 16:45:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mim67de7yf2d 2026-04-04 06:17:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3minlmex7u227...

CVE-2025-59711

creationtimestamp| type| source ---|---|--- 2026-04-03 16:27:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mim56zjduz2i 2026-04-04 06:17:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3minlmldmuk27...

CVE-2026-25044

creationtimestamp| type| source ---|---|--- 2026-04-03 16:15:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mim4kcoevj2i 2026-04-03 17:26:40+00:00| published-proof-of-concept| Telegram/DJsg5Qi7j92DgCP14lqfeXU4IPClBfbIww0fpCMr4ueipk0...

CVE-2026-31398

creationtimestamp| type| source ---|---|--- 2026-04-03 16:13:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mim4g6ct632t...

CVE-2026-31403

creationtimestamp| type| source ---|---|--- 2026-04-03 16:09:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mim46qlf6e2n 2026-05-05 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260506 2026-05-31 20:00:00+00:00| seen...