41042 matches found
CVE-2026-31931
creationtimestamp| type| source ---|---|--- 2026-03-18 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0309/ 2026-03-18 14:15:12+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhdoeboope2c 2026-03-27 09:25:58+00:00| seen|...
PT-2026-26040
The Yoast Duplicate Post plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clone bulk action handler and republish request functions in all versions up to, and including, 4.5. This makes it possible for authenticated attackers, with...
WordPress plugin Yoast Duplicate Post 安全漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
PT-2026-26069
The Post SMTP plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handle office365 oauth redirect function in all versions up to, and including, 3.8.0. This is due to the function being hooked to admin init without any current user can...
PT-2026-26152
OmniGen2-RL contains an unauthenticated remote code execution vulnerability in the reward server component that allows remote attackers to execute arbitrary commands by sending malicious HTTP POST requests. Attackers can exploit insecure pickle deserialization of request bodies to achieve code...
CVE-2025-14031
creationtimestamp| type| source ---|---|--- 2026-03-17 23:33:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhc52vhl3j2c 2026-03-20 01:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhhdy7oekz2q...
CVE-2026-22727
creationtimestamp| type| source ---|---|--- 2026-03-17 23:32:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhc52ouriq2h...
CVE-2026-21994
creationtimestamp| type| source ---|---|--- 2026-03-17 23:32:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhc52i4c6w2c 2026-03-18 02:56:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116247926758021846 2026-03-23 13:45:56+00:00| seen|...
CVE-2026-1376
creationtimestamp| type| source ---|---|--- 2026-03-17 22:32:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhbzntn3nf2n 2026-03-18 01:45:39+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mhcehxyjxf2l 2026-03-20 01:40:09+00:00| seen|...
CVE-2026-30911
creationtimestamp| type| source ---|---|--- 2026-03-17 22:16:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhbys2kvdk2x...
CVE-2026-3564
creationtimestamp| type| source ---|---|--- 2026-03-17 22:01:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhbxxmvsnw2t 2026-03-18 16:40:52+00:00| seen| https://ccb.belgium.be/advisories/warning-critical-vulnerability-connectwise-screenconnect-patch-immediately 2026-03-...
CVE-2026-32840
Edimax GS-5008PL firmware ≤ 1.00.54 contains a stored cross-site scripting vulnerability in system_name_set.cgi via the sysName parameter. A crafted POST enables script payloads that execute in administrators’ management pages (including system_data.js). Affected: GS-5008PL devices; impact descri...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182RCEExploit REC Exploit is a Python-based secur...
GHSA-5V7G-9H8F-8PGG Parse Server session creation endpoint allows overwriting server-generated session fields
Impact An authenticated user can overwrite server-generated session fields sessionToken, expiresAt, createdWith when creating a session object via POST /classes/Session. This allows bypassing the server's session expiration policy by setting an arbitrary far-future expiration date. It also allows...
CVE-2025-20435
creationtimestamp| type| source ---|---|--- 2026-03-17 18:28:20+00:00| seen| https://bsky.app/profile/concisecyber.bsky.social/post/3mhblzz223z2k...
CVE-2026-28519
creationtimestamp| type| source ---|---|--- 2026-03-17 17:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhbh4h2rtx2u 2026-08-19 09:34:03+00:00| seen| https://bsky.app/profile/secqube.com/post/3mtgghda2562f...
CVE-2026-3838
creationtimestamp| type| source ---|---|--- 2026-03-17 15:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhbafueub62m...
CVE-2026-31862
creationtimestamp| type| source ---|---|--- 2026-03-17 14:18:50+00:00| seen| https://bsky.app/profile/infosecbot.bsky.social/post/3mhb63tqafu2w 2026-03-22 13:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhnobc6i462m...
CVE-2026-33139
creationtimestamp| type| source ---|---|--- 2026-03-17 13:53:17+00:00| published-proof-of-concept| https://github.com/ParzivalHack/PySpector/security/advisories/GHSA-v3xv-8vc3-h2m6 2026-03-20 19:16:48+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33139...
CVE-2026-3864
creationtimestamp| type| source ---|---|--- 2026-03-17 12:56:04+00:00| seen| https://bsky.app/profile/kubernetes.dev/post/3mhazhsixfh2h 2026-03-17 15:06:21+00:00| seen| https://bsky.app/profile/kubernetes.io/post/3mhbaqsbtjc2d 2026-03-18 02:28:39+00:00| seen|...