CVE-2026-15234

creationtimestamp| type| source ---|---|--- 2026-08-01 15:00:10+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzqbv6zia2n 2026-08-01 15:00:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzqbxvps624 2026-08-01 15:15:25+00:00| seen|...

CVE-2026-14195

creationtimestamp| type| source ---|---|--- 2026-08-01 14:58:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzq63q6ne2b 2026-08-01 15:25:17+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzrosopge2x 2026-08-01 15:25:38+00:00| seen|...

CVE-2026-15244

creationtimestamp| type| source ---|---|--- 2026-08-01 14:55:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzq2437k52v 2026-08-01 14:56:18+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzq2ydcbl2j 2026-08-01 15:29:04+00:00| seen|...

CVE-2026-13329

creationtimestamp| type| source ---|---|--- 2026-08-01 14:52:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzptphv2b25...

CVE-2026-14214

creationtimestamp| type| source ---|---|--- 2026-08-01 14:43:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzpdtkybh24 2026-08-01 14:43:51+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzpepsjd42u 2026-08-01 15:26:19+00:00| seen|...

CVE-2026-14309

creationtimestamp| type| source ---|---|--- 2026-08-01 14:41:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzp7rw6hi2l 2026-08-01 15:27:35+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzrswo3yv2l 2026-08-01 15:28:23+00:00| seen|...

CVE-2026-14596

creationtimestamp| type| source ---|---|--- 2026-08-01 14:39:17+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzp4ixb422v 2026-08-01 15:12:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzqylcm5j2e 2026-08-01 15:13:27+00:00| seen|...

CVE-2026-2411

Zephyr's Bluetooth host declares a GATT characteristic as two consecutive attributes: a Characteristic Declaration whose permission is hard-coded to BTGATTPERMREAD, and a Characteristic Value attribute that carries the application-specified security permissions e.g. BTGATTPERMREADENCRYPT /...

CVE-2026-67330

@better-auth/scim a better-auth plugin versions = 1.4.0-beta.27 through = 1.7.0-beta.0 through = 1.7.0-beta.9 contain an authorization bypass. SCIM token issuance did not reject provider IDs already used by existing SSO, SAML, OIDC, generic OAuth, or social account providers, and the same logical...

CVE-2026-6453

creationtimestamp| type| source ---|---|--- 2026-08-01 10:22:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jaeeialp5gym4 2026-08-01 17:33:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzyur7if52x 2026-08-01 17:34:09+00:00| seen|...

CVE-2026-13157

creationtimestamp| type| source ---|---|--- 2026-08-01 10:20:08+00:00| seen| https://bsky.app/profile/smartdeals.bsky.social/post/3mrzan5fore2x 2026-08-01 13:00:04+00:00| seen| Telegram/zkpMdkb1nwTnC0N6uNzVvNYCe5r6OIkmQsBbvblzOMqyUQE 2026-08-01 14:55:17+00:00| seen|...

CVE-2026-18062

creationtimestamp| type| source ---|---|--- 2026-08-01 10:08:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ibokoolakvlm2 2026-08-01 17:44:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzzihv5tx2d 2026-08-01 17:45:13+00:00| seen|...

CVE-2026-15450

creationtimestamp| type| source ---|---|--- 2026-08-01 09:50:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dzh6iyuwq4bgt 2026-08-01 11:01:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrzcwxodbd2z...

CVE-2026-15368

creationtimestamp| type| source ---|---|--- 2026-08-01 09:00:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrz46myynr2i 2026-08-01 14:35:24+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzovmpesp24 2026-08-01 14:35:26+00:00| seen|...

CVE-2026-15368

The User Profile Builder WordPress plugin before 3.16.4 does not correctly bind the automatic login performed after user registration to the newly created account, allowing unauthenticated attackers to obtain an authenticated session for an arbitrary existing user, including administrators, on...

CVE-2026-12696

The wpForo Forum WordPress plugin before 3.1.2 does not sanitize and escape a user profile field before outputting it inside an HTML attribute on the public participant profile page, allowing users with a subscriber-level account to inject JavaScript that executes in the browser of any visitor wh...

CVE-2026-58178

creationtimestamp| type| source ---|---|--- 2026-08-01 06:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mryu6dkplb2v...

CVE-2026-12696

The wpForo Forum WordPress plugin before 3.1.2 does not sanitize and escape a user profile field before outputting it inside an HTML attribute on the public participant profile page, allowing users with a subscriber-level account to inject JavaScript that executes in the browser of any visitor wh...

CVE-2026-12696

CVE-2026-12696 affects the wpForo Forum WordPress plugin prior to 3.1.2. The vulnerability is a Stored XSS in the public participant profile page: a profile field is not sanitized/escaped before being output inside an HTML attribute, permitting a subscriber-level user to inject JavaScript that ru...

CVE-2026-12696 wpForo Forum < 3.1.2 - Subscriber+ Stored XSS via Profile Location Field

The wpForo Forum WordPress plugin before 3.1.2 does not sanitize and escape a user profile field before outputting it inside an HTML attribute on the public participant profile page, allowing users with a subscriber-level account to inject JavaScript that executes in the browser of any visitor wh...