CVE-2026-28789

creationtimestamp| type| source ---|---|--- 2026-03-01 23:59:25+00:00| published-proof-of-concept| https://github.com/OliveTin/OliveTin/security/advisories/GHSA-45m3-398w-m2m9 2026-03-07 16:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgi74zq7d325...

CVE-2026-3389

creationtimestamp| type| source ---|---|--- 2026-03-01 14:14:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfywez7ims2o...

CVE-2026-3391

creationtimestamp| type| source ---|---|--- 2026-03-01 14:04:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfyvt4e4jq2e...

CVE-2026-3394

creationtimestamp| type| source ---|---|--- 2026-03-01 13:59:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfyvk5vy3a2u...

CVE-2026-3392

creationtimestamp| type| source ---|---|--- 2026-03-01 13:48:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfyuwhkh252u...

CVE-2026-3386

creationtimestamp| type| source ---|---|--- 2026-03-01 09:59:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfyi4kpq4u2e...

CVE-2026-3382

creationtimestamp| type| source ---|---|--- 2026-03-01 09:54:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfyhtmcfma2o...

CVE-2026-28508

creationtimestamp| type| source ---|---|--- 2026-03-01 04:30:09+00:00| published-proof-of-concept| https://github.com/idno/idno/security/advisories/GHSA-fcrh-fqxh-6fx6 2026-03-06 05:51:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgemmi7vhp24...

CVE-2026-23627

creationtimestamp| type| source ---|---|--- 2026-03-01 04:26:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfxvkfqqsr2c 2026-03-01 04:27:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfxvl6wmqk2c...

GHSA-M3XH-9434-G336

creationtimestamp| type| source ---|---|--- 2026-03-01 03:31:16+00:00| seen| https://bsky.app/profile/cyber-news-fi.bsky.social/post/3mfxsh6sxfc2z...

EUVD-2026-9107

wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows authenticated subscribers to upload SVG files as profile avatars through the avatar upload functionality. Attackers upload a crafted SVG containing CSS injection or JavaScript event handlers that execute in the...

CVE-2026-3376

creationtimestamp| type| source ---|---|--- 2026-03-01 00:17:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfxhnhirxl2x 2026-03-01 04:34:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116152052930247090 2026-03-01 09:00:29+00:00| seen|...

CVE-2026-28561

creationtimestamp| type| source ---|---|--- 2026-03-01 00:12:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfxhej34ew27...

CVE-2026-28559

creationtimestamp| type| source ---|---|--- 2026-03-01 00:02:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfxgsm75am2y...

CVE-2026-28562

creationtimestamp| type| source ---|---|--- 2026-02-28 23:54:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfxge7qf2o2z 2026-03-01 04:26:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfxvjvfkpq2t 2026-03-01 04:26:56+00:00| seen|...

CVE-2026-28558

wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows authenticated subscribers to upload SVG files as profile avatars through the avatar upload functionality. Attackers upload a crafted SVG containing CSS injection or JavaScript event handlers that execute in the...

CVE-2026-28558 wpForo Forum 2.4.14 Stored XSS via SVG Avatar File Upload

wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows authenticated subscribers to upload SVG files as profile avatars through the avatar upload functionality. Attackers upload a crafted SVG containing CSS injection or JavaScript event handlers that execute in the...

CVE-2026-28558

wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows authenticated subscribers to upload SVG files as profile avatars through the avatar upload functionality. Attackers upload a crafted SVG containing CSS injection or JavaScript event handlers that execute in the...

CVE-2026-3010

creationtimestamp| type| source ---|---|--- 2026-02-28 13:44:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfwea3ojag2v 2026-03-01 00:00:42+00:00| seen| https://infosec.exchange/users/offseq/statuses/116150975781762184 2026-03-01 00:00:42+00:00| seen|...

CVE-2026-2844

creationtimestamp| type| source ---|---|--- 2026-02-28 13:43:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfwe67bqls2n 2026-03-01 01:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116151328926962047 2026-03-01 01:30:30+00:00| seen|...