CVE-2025-53912

creationtimestamp| type| source ---|---|--- 2026-01-20 16:10:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcuk75iw7w2c 2026-01-20 16:30:51+00:00| seen| https://infosec.place/objects/7a4b9871-e1dc-42aa-96f2-7d71c4fb4863 2026-01-20 17:12:04+00:00| seen|...

CVE-2025-14798

The LearnPress – WordPress LMS Plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.3.2.4 via the getitempermissionscheck function. This makes it possible for unauthenticated attackers to extract sensitive data including user first names and las...

CVE-2025-14798 LearnPress – WordPress LMS Plugin <= 4.3.2.4 - Missing Authorization to Unauthenticated Sensitive User Information Disclosure via REST API

The LearnPress – WordPress LMS Plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.3.2.4 via the getitempermissionscheck function. This makes it possible for unauthenticated attackers to extract sensitive data including user first names and las...

PT-2026-3534

The LearnPress – WordPress LMS Plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.3.2.4 via the get item permissions check function. This makes it possible for unauthenticated attackers to extract sensitive data including user first names and...

CERTFR-2026-ACT-002

creationtimestamp| type| source ---|---|--- 2026-01-19 13:47:14+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mcrrqv3oq52n 2026-01-19 13:47:18+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/115922071296350254 2026-01-19 15:35:49+00:00| seen|...

CVE-2026-1139

creationtimestamp| type| source ---|---|--- 2026-01-19 06:03:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcqxtl5vjg2i 2026-01-19 07:09:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcr3ixplwd27...

CVE-2025-14231

creationtimestamp| type| source ---|---|--- 2026-01-16 01:01:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcivl2dl3t2m 2026-01-16 01:41:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcixsunlnr2m 2026-01-20 21:24:40+00:00| seen|...

CVE-2026-1008

A stored cross-site scripting XSS vulnerability exists in the user profile text fields of Altium 365. Insufficient server-side input sanitization allows authenticated users to inject arbitrary HTML and JavaScript payloads using whitespace-based attribute parsing bypass techniques. The injected...

CVE-2026-1008 Stored Cross-Site Scripting in Altium Live User Profile Fields

A stored cross-site scripting XSS vulnerability exists in the user profile text fields of Altium 365. Insufficient server-side input sanitization allows authenticated users to inject arbitrary HTML and JavaScript payloads using whitespace-based attribute parsing bypass techniques. The injected...

CVE-2026-22909

creationtimestamp| type| source ---|---|--- 2026-01-15 13:46:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mchpthwwyb2m 2026-01-15 13:48:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mchpxi7ecd2t 2026-01-15 15:12:35+00:00| seen|...

CVE-2026-23478

creationtimestamp| type| source ---|---|--- 2026-01-15 02:06:08+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mcgipjebcv2p 2026-01-15 03:33:16+00:00| seen| https://bsky.app/profile/cyberdudebivash.bsky.social/post/3mcgnl6wnk22q 2026-01-15 12:01:11+00:00| seen|...

PT-2026-3031

Arunna 1.0.0 contains a cross-site request forgery vulnerability that allows attackers to manipulate user profile settings without authentication. Attackers can craft a malicious form to change user details, including passwords, email, and administrative privileges by tricking authenticated users...

CVE-2026-22861

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Prior to 2.3.1.2, There is a heap-based buffer overflow in SIccCalcOp::Describe at IccProfLib/IccMpeCalc.cpp. This...

Cross-site Scripting (XSS)

Overview ph7software/ph7builder is a pH7Builder. Social Dating Web App Site Builder Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Description field in user profiles. An attacker can execute arbitrary JavaScript code in the context of other users by submittin...

Phishing scammers are posting fake “account restricted” comments on LinkedIn

Recently, fake LinkedIn profiles have started posting comment replies claiming that a user has " engaged in activities that are not in compliance" with LinkedIn's policies and that their account has been " temporarily restricted" until they submit an appeal through a specified link in the comment...

TLP 授权问题漏洞

TLP is a power management software for linrunner personal developers. An authorization issue vulnerability exists in TLP version 1.9 up to and including version 1.9.1, which stems from improper authentication and could lead to a local user arbitrarily controlling power profiles and daemon log...

CVE-2026-22861

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Prior to 2.3.1.2, There is a heap-based buffer overflow in SIccCalcOp::Describe at IccProfLib/IccMpeCalc.cpp. This...

CVE-2026-22861 iccDEV has a heap-buffer-overflow in SIccCalcOp::Describe() at IccProfLib/IccMpeCalc.cpp

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Prior to 2.3.1.2, There is a heap-based buffer overflow in SIccCalcOp::Describe at IccProfLib/IccMpeCalc.cpp. This...

CVE-2025-46685

creationtimestamp| type| source ---|---|--- 2026-01-13 17:20:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcd2vf4bak2m 2026-01-13 17:21:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcd2wze6l422 2026-01-13 17:47:42+00:00| seen|...

Data broker fined after selling Alzheimer’s patient info and millions of sensitive profiles

California's privacy regulator has fined a Texas data broker $45,000 and banned it from selling Californians' personal information after it sold Alzheimer patients' data. Texan company Rickenbacher Data LLC, which does business as Datamasters, bought and resold the names, addresses, phone numbers...