CVE-2026-7651 User Registration & Membership <= 5.1.5 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Media Deletion via 'profile-pic-url' Parameter

The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.5. This is due to missing...

CVE-2026-7651 User Registration & Membership <= 5.1.5 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Media Deletion via 'profile-pic-url' Parameter

The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.5. This is due to missing...

CVE-2026-45102

creationtimestamp| type| source ---|---|--- 2026-05-28 03:02:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuzuamewz2r...

CVE-2026-44888

creationtimestamp| type| source ---|---|--- 2026-05-28 03:02:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuztz22cl2n...

CVE-2026-48064

creationtimestamp| type| source ---|---|--- 2026-05-28 00:01:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuprfcpqb2n...

CVE-2026-8362

creationtimestamp| type| source ---|---|--- 2026-05-28 00:01:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmupr5ugvq2w 2026-05-28 04:18:30+00:00| seen| https://www.acn.gov.it/portale/w/gladinet-disponibili-poc-per-nuove-vulnerabilita-in-triofox...

CVE-2026-8361

creationtimestamp| type| source ---|---|--- 2026-05-28 00:01:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmupqwidc72z 2026-05-28 04:18:30+00:00| seen| https://www.acn.gov.it/portale/w/gladinet-disponibili-poc-per-nuove-vulnerabilita-in-triofox...

PT-2026-44729

Name of the Vulnerable Software and Affected Versions compliance-trestle versions prior to 3.12.3 compliance-trestle versions prior to 4.0.3 Description The profile import mechanism in the compliance-trestle library fails to perform boundary checks when resolving trestle:// URIs and relative file...

CVE-2026-45136

creationtimestamp| type| source ---|---|--- 2026-05-27 23:19:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmunfckcpg2p...

CVE-2026-45965

A flaw was found in the AppArmor security module of the Linux kernel. When the exportbinary parameter is disabled at runtime, a previously loaded profile that is subsequently replaced can lead to a NULL pointer dereference. This occurs when the system attempts to resolve symbolic links to raw dat...

GHSA-G3VG-VX23-3858 compliance-trestle Remote Fetching Mechanism has an Arbitrary File Write via Cache Path Traversal

Summary The compliance-trestle library's remote fetching cache mechanism HTTPSFetcher and SFTPFetcher constructs the local cache file path from the URL path component without sanitizing path traversal sequences ../. When a remote OSCAL profile references a URL with traversal in its path, the HTTP...

CVE-2026-46414

creationtimestamp| type| source ---|---|--- 2026-05-27 22:55:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmum2wangr2c 2026-05-28 00:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmupprp6ak2c 2026-05-28 02:34:54+00:00| seen|...

CVE-2026-45322

creationtimestamp| type| source ---|---|--- 2026-05-27 22:48:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmulp7z3no2c 2026-05-28 02:32:33+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mmuy77l42d2v...

CVE-2026-8363

creationtimestamp| type| source ---|---|--- 2026-05-27 22:02:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuj45tjn52z 2026-05-28 04:18:30+00:00| seen| https://www.acn.gov.it/portale/w/gladinet-disponibili-poc-per-nuove-vulnerabilita-in-triofox...

CVE-2026-44712

creationtimestamp| type| source ---|---|--- 2026-05-27 22:01:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuizvc4qx2e 2026-05-27 23:01:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmumfptprr2q...

DEBIAN-CVE-2026-44724

systeminformation is a System and OS information library for node.js. From 4.17.0 to 5.31.5, on Linux, systeminformation is vulnerable to command injection in networkInterfaces when an active NetworkManager connection profile name contains shell metacharacters. The vulnerable value is obtained...

CVE-2026-42197

RELATE is a web-based courseware package. Versions prior to commit 555f0efb1c5bd7531c07cd73724d7e566a81f620 have a stored cross-site scripting vulnerability that allows any enrolled student to execute arbitrary JavaScript in an administrator's browser session, potentially leading to full admin...

CVE-2026-4392

creationtimestamp| type| source ---|---|--- 2026-05-27 20:11:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmucv7e3b52p...

CVE-2026-46427

creationtimestamp| type| source ---|---|--- 2026-05-27 19:56:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmuc3mlhfr2k...

CVE-2026-8360 Gladinet Triofox Unchecked Return Value to NULL Pointer Dereference DOS

Function calls to WOSCommonUtil.dll!WOSSysInfoGetDeviceInterface in various DLLs i.e., WOSProfileMgrModule.dll, WOSWebDavModule.dll can return a NULL pointer i.e., when no user is logged into the Triofox Server Agent Management Console. The returned NULL pointer is not checked before being...