CVE-2026-23927

creationtimestamp| type| source ---|---|--- 2026-05-06 10:36:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6iz62mv72t 2026-05-06 14:30:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3ml6w2c6y7n2q...

CVE-2026-6788

creationtimestamp| type| source ---|---|--- 2026-05-06 10:24:20+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/watchguard-security-advisory-av26-428 2026-05-06 17:41:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7aqfe6os2c 2026-05-06 17:43:28+00:00| seen|...

CVE-2026-6344

creationtimestamp| type| source ---|---|--- 2026-05-06 10:16:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6hv7hps62o 2026-05-08 19:33:13+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlehvpbjhc2s...

CVE-2026-7448

creationtimestamp| type| source ---|---|--- 2026-05-06 10:00:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6gxral7h2q 2026-05-08 23:33:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlevcuetrz2c...

CVE-2026-7457

The LatePoint plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to and including 5.5.0. This is due to insufficient input sanitization on the customer cabinet profile update endpoint — where raw POST parameters firstname, lastname, phone, notes bypass sanitizati...

CVE-2026-3504

creationtimestamp| type| source ---|---|--- 2026-05-06 07:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3ml66qe4ren2s...

CVE-2026-7457 LatePoint <= 5.5.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Customer Cabinet Profile Update

The LatePoint plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to and including 5.5.0. This is due to insufficient input sanitization on the customer cabinet profile update endpoint — where raw POST parameters firstname, lastname, phone, notes bypass sanitizati...

CVE-2026-7457 LatePoint <= 5.5.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Customer Cabinet Profile Update

The LatePoint plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to and including 5.5.0. This is due to insufficient input sanitization on the customer cabinet profile update endpoint — where raw POST parameters firstname, lastname, phone, notes bypass sanitizati...

CVE-2026-7457

The CVE-2026-7457 entry concerns the WordPress LatePoint plugin (versions up to 5.5.0). The root cause is insufficient input sanitization on the customer cabinet profile update endpoint: raw POST fields (first_name, last_name, phone, notes) bypass sanitization because OsCustomerModel does not ove...

CVE-2026-7457

The LatePoint plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to and including 5.5.0. This is due to insufficient input sanitization on the customer cabinet profile update endpoint — where raw POST parameters firstname, lastname, phone, notes bypass sanitizati...

CVE-2026-41429

creationtimestamp| type| source ---|---|--- 2026-05-06 04:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3ml5ta25iz32p 2026-05-08 11:02:15+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mldle5h5if2b...

CVE-2025-71256

creationtimestamp| type| source ---|---|--- 2026-05-06 02:54:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml5p5ipdlj2k 2026-05-06 05:33:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5y2ok74h2t 2026-06-01 18:00:00+00:00| seen|...

CVE-2026-43646

creationtimestamp| type| source ---|---|--- 2026-05-06 02:07:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ml5mkh2nvi25 2026-05-06 17:10:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml76yfunya2r...

CVE-2026-35579

creationtimestamp| type| source ---|---|--- 2026-05-06 02:01:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5m7sjb5n2e...

CVE-2026-39402

creationtimestamp| type| source ---|---|--- 2026-05-06 01:41:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5l3vbuvo2r...

CVE-2026-41950

creationtimestamp| type| source ---|---|--- 2026-05-06 01:21:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5jyljkm52e 2026-07-13 13:00:07+00:00| seen| https://t.me/truesecator/8341 2026-07-14 00:00:44+00:00| seen| https://t.me/truesecator/8341...

SUSE-SU-2026:21559-1 Security update for wireshark

This update for wireshark fixes the following issues - CVE-2026-3201: missing limit checks in USB HID protocol dissector's parsereportdescriptor function can lead to memory exhaustion bsc1258907. - CVE-2026-3203: missing length checks in the RF4CE Profile protocol dissector can lead to illegal...

PT-2026-37353

The LatePoint plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to and including 5.5.0. This is due to insufficient input sanitization on the customer cabinet profile update endpoint — where raw POST parameters first name, last name, phone, notes bypass...

PT-2026-38234

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.10 Description Insufficient access control in the Nostr plugin HTTP profile routes allows operators with write permissions to persist profile configuration without requiring admin authority. Attackers with...

PT-2026-38263

Name of the Vulnerable Software and Affected Versions auth0-js versions 8.11.0 through 9.32.0 Description Improper validation in the Auth0.js SDK may allow the return of user profile data when a specifically crafted invalid ID token is used in conjunction with a valid access token. This issue...