CVE-2026-59552: Server-Side Request Forgery (SSRF)

Unauthenticated Server Side Request Forgery SSRF in 3D Flipbook PDF Viewer & Embedder = 1.4.2 versions...

CVE-2026-59550: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in AWP Classifieds = 4.4.7 versions...

CVE-2026-59548: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Unauthenticated Sensitive Data Exposure in Byteflows Travel & Hotel Booking = 1.0.0 versions...

CVE-2026-59539: Authorization Bypass Through User-Controlled Key

Subscriber Insecure Direct Object References IDOR in Paid Member Subscriptions = 3.0.7 versions...

CVE-2026-59535: Missing Authorization

Unauthenticated Broken Access Control in Thrive Product Manager = 10.9.2 versions...

CVE-2026-59533: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in Relevanssi Light = 1.2.2 versions...

CVE-2026-66476: Improper Limitation of a Pathname to a Restricted Directory

Administrator Arbitrary File Deletion in Easy Digital Downloads = 3.6.9 versions...

CVE-2026-65564: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Unauthenticated Sensitive Data Exposure in MapPress Maps for WordPress = 2.97.6 versions...

CVE-2026-65435: Missing Authorization

Unauthenticated Broken Access Control in Thrive Leads Version = 10.9.2 versions...

CVE-2026-59557: Missing Authorization

Unauthenticated Broken Access Control in Events Made Easy = 3.1.3 versions...

CVE-2026-59546: Authorization Bypass Through User-Controlled Key

Subscriber Broken Authentication in Hide My WP Ghost = 7.0.06 versions...

CVE-2026-59534: Missing Authorization

Unauthenticated Broken Access Control in Post My CF7 Form = 6.2.0 versions...

CVE-2026-59532: Improper Validation of Specified Quantity in Input

Unauthenticated Other Vulnerability Type in Booking and Rental Manager = 2.7.2 versions...

CVE-2026-59528: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Subscriber Sensitive Data Exposure in ShipTime: Discounted Shipping Rates = 1.1.1 versions...

CVE-2025-59172: Improper Neutralization of Special Elements used in an OS Command

Ericsson Packet Core Controller PCC versions prior to 1.38 contain an Improper Neutralization of Special Elements vulnerability allowing an attacker to execute arbitrary code as root...

CVE-2026-59531: Improper Validation of Specified Quantity in Input

Unauthenticated Unknown in Falcon – WordPress Optimizations & Tweaks = 2.10.0 versions...

CVE-2026-28912: Protection Mechanism Failure

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.7, macOS Tahoe 26.6. A user may be able to elevate privileges...

CVE-2026-66018: Exposure of Sensitive Information to an Unauthorized Actor

Build readers can access another repository's environment properties. A caller with read access to an ordinary repository can select a readable repository parameter while retrieving environment properties for a protected build, exposing build environment secrets confidentiality impact; no integri...

Erlang/OTP -- megaco flex scanner buffer overflow

https://github.com/erlang/otp/security/advisories/GHSA-7xgh-gmgf-q2g7 reports: A remote unauthenticated attacker can crash Erlang nodes running the megaco text codec with the flex scanner option by sending an H.248/Megaco message with a property parm name exceeding 452 bytes. The overflow occurs ...

user-scanner v1.4.2

User Scanner A powerful 2-in-1 OSINT suite engineered for deep Email and Username Intelligence. With 380+ total scan vectors —including 155+ email-integrated sites and 225+ username platforms —you can map digital footprints, analyze target behavior, uncover interests, full metadata of usernames a...