PT-2026-35809

OpenClaw before 2026.4.8 contains a security bypass vulnerability in node.invokebrowser.proxy that allows mutation of persistent browser profiles. Attackers can exploit this path to circumvent the browser.request persistent profile-mutation guard and modify browser configurations...

PT-2026-35714

Name of the Vulnerable Software and Affected Versions Minerva version 3.6.0 Description An insecure direct object reference IDOR issue exists in the '/minerva/user/updateUserProfile' endpoint. This improper access control allows an authenticated user to modify the profiles of other registered...

CVE-2026-40724

creationtimestamp| type| source ---|---|--- 2026-04-27 22:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkj4rmyn5f2h...

CVE-2026-6741

creationtimestamp| type| source ---|---|--- 2026-04-27 21:00:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkixnm7i5g2t 2026-04-27 21:01:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkixpgj3wt2n 2026-04-28 19:33:06+00:00| seen|...

CVE-2026-7153

creationtimestamp| type| source ---|---|--- 2026-04-27 21:00:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkixneplf62t 2026-04-27 21:01:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkixp74yld2f...

CVE-2026-7152

creationtimestamp| type| source ---|---|--- 2026-04-27 21:00:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkixn5ajut2f 2026-04-27 21:01:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkixoxsmgf2z...

WordPress Profile Builder Pro plugin <= 3.15.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Profile Builder Pro versions = 3.15.0...

CVE-2026-42612

creationtimestamp| type| source ---|---|--- 2026-04-27 12:16:04+00:00| published-proof-of-concept| https://github.com/getgrav/grav/security/advisories/GHSA-9695-8fr9-hw5q 2026-05-11 16:59:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllqph7f7n2k 2026-05-24...

CVE-2026-42607

creationtimestamp| type| source ---|---|--- 2026-04-27 12:14:32+00:00| published-proof-of-concept| https://github.com/getgrav/grav/security/advisories/GHSA-w48r-jppp-rcfw 2026-05-11 17:04:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllqxvaxcy26...

CVE-2026-42315

creationtimestamp| type| source ---|---|--- 2026-04-27 08:09:32+00:00| published-proof-of-concept| https://github.com/pyload/pyload/security/advisories/GHSA-838g-gr43-qqg9 2026-05-11 18:24:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllvhstyvk2c 2026-05-11...

CVE-2026-7092

A vulnerability has been found in code-projects Invoice System in Laravel 1.0. Affected is an unknown function of the file /profile/ of the component Profile Handler. Such manipulation of the argument ID leads to improper authorization. The attack can be executed remotely. The exploit has been...

CVE-2026-7075

creationtimestamp| type| source ---|---|--- 2026-04-27 05:48:46+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mkhepjxamw27...

CVE-2026-7092

A vulnerability has been found in code-projects Invoice System in Laravel 1.0. Affected is an unknown function of the file /profile/ of the component Profile Handler. Such manipulation of the argument ID leads to improper authorization. The attack can be executed remotely. The exploit has been...

CVE-2026-7092 code-projects Invoice System in Laravel Profile profile improper authorization

A vulnerability has been found in code-projects Invoice System in Laravel 1.0. Affected is an unknown function of the file /profile/ of the component Profile Handler. Such manipulation of the argument ID leads to improper authorization. The attack can be executed remotely. The exploit has been...

CVE-2026-7092

Technical details about CVE-2026-7092 are not publicly available in the provided documents. No affected products, components, or remediation specifics are disclosed here. Monitor for updates.

EUVD-2026-25780

A vulnerability has been found in code-projects Invoice System in Laravel 1.0. Affected is an unknown function of the file /profile/ of the component Profile Handler. Such manipulation of the argument ID leads to improper authorization. The attack can be executed remotely. The exploit has been...

CVE-2026-7092 code-projects Invoice System in Laravel Profile profile improper authorization

A vulnerability has been found in code-projects Invoice System in Laravel 1.0. Affected is an unknown function of the file /profile/ of the component Profile Handler. Such manipulation of the argument ID leads to improper authorization. The attack can be executed remotely. The exploit has been...

CVE-2026-39474

creationtimestamp| type| source ---|---|--- 2026-04-27 05:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkhdrpsinj2s...

CVE-2026-7106

creationtimestamp| type| source ---|---|--- 2026-04-27 03:31:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkh4z6ewbc2l 2026-04-28 00:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkjdi7e6sz2s...

CVE-2026-7106

The vulnerability CVE-2026-7106 affects the Highland Software Custom Role Manager plugin for WordPress (versions up to and including 1.0.0). The root cause is insufficient authorization checks in the hscrm_save_user_roles() function, hooked to the personal_options_update action. This action is ac...