CVE-2026-65544

creationtimestamp| type| source ---|---|--- 2026-08-09 22:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msomet4b2t22 2026-08-10 18:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msqpglj62u2y...

Profile Builder < 3.4.9 - Improper Authentication

The Profile Builder plugin before 3.4.9 for WordPress allows unauthenticated attackers to gain administrative access by exploiting an improper authentication vulnerability in the password reset functionality. An attacker can reset the password of any user, including administrators, without proper...

User Profile Builder < 3.11.8 - File Upload

The User Profile Builder WordPress plugin before 3.11.8 does not have proper authorisation, allowing unauthenticated users to upload media files via the async upload functionality of WP. id: CVE-2024-6366 info: name: User Profile Builder 3.11.8 - File Upload author: s4e-io severity: high...

Langflow < 1.7.0 - Path Traversal

Langflow 1.7.1 contains a path traversal caused by insufficient filtering of foldername and filename parameters in downloadprofilepicture endpoint, letting attackers read secretkey across directories, exploit requires crafted request. id: CVE-2026-33497 info: name: Langflow 1.7.0 - Path Traversal...

CVE-2026-19354

creationtimestamp| type| source ---|---|--- 2026-08-09 14:47:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/a4ovjan3ipnsr...

CVE-2026-15153

creationtimestamp| type| source ---|---|--- 2026-08-09 14:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msnrkhs5la26...

CVE-2026-15038

creationtimestamp| type| source ---|---|--- 2026-08-09 07:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msn2v3ftk22a 2026-08-09 17:04:23+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/97318 2026-08-10 00:00:09+00:00| published-proof-of-concept|...

CVE-2026-18603

creationtimestamp| type| source ---|---|--- 2026-08-09 06:31:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5gu4ns4p4elmp...

CVE-2026-10595

creationtimestamp| type| source ---|---|--- 2026-08-09 05:00:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msmsidmgcp2w 2026-08-10 12:13:39+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3msq36grg2f2m 2026-08-10 12:13:42+00:00| seen|...

CVE-2026-13344

creationtimestamp| type| source ---|---|--- 2026-08-09 00:18:18+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msmcmiopux2g 2026-08-09 20:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msofoafgbf2z...

CVE-2026-15257

creationtimestamp| type| source ---|---|--- 2026-08-08 20:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mslv7c4uaq2i 2026-08-09 16:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msnyb3cao62a...

CVE-2026-71951

creationtimestamp| type| source ---|---|--- 2026-08-08 17:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mslkwaehef2b 2026-08-09 05:01:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msmsjvhu462m...

CVE-2026-15252

creationtimestamp| type| source ---|---|--- 2026-08-08 08:16:11+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mskmxwsoxh22 2026-08-09 04:18:18+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msmpzpez4w2i...

CVE-2026-15972

creationtimestamp| type| source ---|---|--- 2026-08-08 03:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msk3dqwomo27...

WordPress Core <6.5.2 - Cross-Site Scripting

WordPress Core is vulnerable to Stored Cross-Site Scripting via user display names in the Avatar block in various versions up to 6.5.2 due to insufficient output escaping on the display name. id: CVE-2024-4439 info: name: WordPress Core 6.5.2 - Cross-Site Scripting author: nqdung2002 severity: hi...

CVE-2026-62293

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11, the hidden scan command concatenates attacker-controlled Implementation Guide titles, profile titles, and source references into scan.html without escaping in Scanner.java. As...

CVE-2026-62293 HAPI FHIR: Stored XSS in scan report via unescaped IG and profile titles

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11, the hidden scan command concatenates attacker-controlled Implementation Guide titles, profile titles, and source references into scan.html without escaping in Scanner.java. As...

CVE-2026-62293

CVE-2026-62293 affects HAPI FHIR (Java) prior to 6.9.11. The vulnerability arises when the hidden scan command concatenates attacker‑controlled Implementation Guide titles, profile titles, and source references into scan.html without escaping in Scanner.java, enabling stored XSS in the generated ...

EUVD-2026-54614

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11, the hidden scan command concatenates attacker-controlled Implementation Guide titles, profile titles, and source references into scan.html without escaping in Scanner.java. As...

CVE-2026-62293 HAPI FHIR: Stored XSS in scan report via unescaped IG and profile titles

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11, the hidden scan command concatenates attacker-controlled Implementation Guide titles, profile titles, and source references into scan.html without escaping in Scanner.java. As...