EUVD-2026-64832

Unauthenticated Cross Site Scripting XSS in Social Media & Share Icons = 2.9.9 versions...

CVE-2026-66623

CVE-2026-66623 is an unauthenticated Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Social Media & Share Icons (also known as Ultimate Social Media Icons), affecting versions 2.9.9 and below . The vulnerability was discovered by Bonds and carries a CVSS 3.1 score of 7.1 (HIGH) ,...

Astra Linux – Vulnerability in Firefox

Insufficient validation in the Drag and Drop API, combined with social engineering, may have allowed an attacker to trick end-users into creating shortcuts to local system files. This could have been exploited to execute arbitrary code. This vulnerability affects Firefox versions earlier than 115...

CVE-2026-66897

creationtimestamp| type| source ---|---|--- 2026-08-24 09:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtszokro2q2f 2026-08-24 10:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/117150018844317018 2026-08-24 10:30:29+00:00| seen|...

CVE-2026-77994

creationtimestamp| type| source ---|---|--- 2026-08-24 08:43:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4oh35o677aslv 2026-08-24 08:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtswdbvcuz2m 2026-08-24 09:00:27+00:00| seen|...

CVE-2026-78251

creationtimestamp| type| source ---|---|--- 2026-08-24 07:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117149310942090116 2026-08-24 07:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mtsruvafgr2c 2026-08-24 08:17:44+00:00| seen|...

Mailphish

Mailphish Codificato da Pro MCracker Mailphish ti aiuterà a creare email di phishing professionali in modo rapido e semplice Visita i nostri siti web per apprendere metodi di hacking https://crackcodes.xyz e https://crackcodes.in Se copi il codice e ne crei uno tuo, non dimenticare di darmi...

cyph

Cyph Cyph is a cryptographically secure messaging and social networking service, providing an extreme level of privacy combined with best-in-class ease of use. Cyph’s patented technology — built by former SpaceX engineers, audited by Cure53, and the basis of research presentations at Black Hat an...

clickfix-simulator-2025

Strumento di formazione ClickFix Uno strumento di simulazione leggero e self-hosted per attacchi di social engineering di tipo "ClickFix". Disclaimer Questo strumento è SOLO per la FORMAZIONE AUTORIZZATA DI SECURITY AWARENESS. L'uso non autorizzato di questo strumento per prendere di mira sistemi...

CVE-2026-78003

creationtimestamp| type| source ---|---|--- 2026-08-22 09:00:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117138340214723722 2026-08-22 09:00:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mtnvxy3zpx2c 2026-08-22 09:03:42+00:00| seen|...

CVE-2026-77002

creationtimestamp| type| source ---|---|--- 2026-08-22 07:30:23+00:00| seen| https://infosec.exchange/users/offseq/statuses/117137986193455712 2026-08-22 07:30:25+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mtnqwyfch424 2026-08-23 16:40:04+00:00| seen|...

CVE-2026-77000

The WP Social Media Login WordPress plugin through 1.0.6 does not verify that a social login was actually completed with the identity provider before authenticating a visitor, allowing unauthenticated attackers to log in as any existing user, including administrators, by supplying that user's ema...

CVE-2026-77000

The WP Social Media Login WordPress plugin (through 1.0.6 ) fails to verify that a social login was actually completed with the identity provider before authenticating a visitor. The CVELIST entry identifies the specific flow as the Twitter login flow . An unauthenticated attacker can log in as a...

CVE-2026-77001 Social Login & Sharing buttons with Analytics By SoClever <= 1.2.0 - Unauthenticated Authentication Bypass

The Social Login & Sharing buttons with Analytics By SoClever WordPress plugin through 1.2.0 does not perform any authentication, authorisation or nonce checks in one of its publicly accessible login handlers, allowing unauthenticated attackers to obtain a valid session as any existing user,...

EUVD-2026-64225

The WP Social Media Login WordPress plugin through 1.0.6 does not verify that a social login was actually completed with the identity provider before authenticating a visitor, allowing unauthenticated attackers to log in as any existing user, including administrators, by supplying that user's ema...

EUVD-2026-64226

The Social Login & Sharing buttons with Analytics By SoClever WordPress plugin through 1.2.0 does not perform any authentication, authorisation or nonce checks in one of its publicly accessible login handlers, allowing unauthenticated attackers to obtain a valid session as any existing user,...

CVE-2026-77000 WP Social Media Login <= 1.0.6 - Unauthenticated Account Takeover via Twitter Login Flow

The WP Social Media Login WordPress plugin through 1.0.6 does not verify that a social login was actually completed with the identity provider before authenticating a visitor, allowing unauthenticated attackers to log in as any existing user, including administrators, by supplying that user's ema...

CVE-2026-53525

creationtimestamp| type| source ---|---|--- 2026-08-22 01:13:03+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mtn3uaac5i2x 2026-08-22 01:13:25+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117136503782177429...

SUSE CVE-2026-76018

Privilege elevation in Import in Google Chrome prior to 151.0.7922.173 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted file. Chromium security severity: High...

CVE-2026-76904

creationtimestamp| type| source ---|---|--- 2026-08-21 22:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmr46uv4d2o 2026-08-21 22:07:56+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtmrja7q442p 2026-08-21 23:20:04+00:00| seen|...