CVE-2026-76039

Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...

CVE-2026-76039

Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...

CVE-2026-76039

Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...

CVE-2026-76039

Google Chrome on Android prior to 151.0.7922.169 contains an incorrect reference resolution flaw in Core, allowing a remote attacker to use social engineering and a crafted HTML page to obtain sensitive information (CVSS 6.5, confidentiality-high). CISA SSVC reports no active exploitation. Fix: u...

Ransom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000

A ransomware affiliate calling itself Ransom Busters has been spotted proactively sending emails to victim organizations and claims to delete stolen data from ransomware groups' servers in exchange for a fee ranging from $20,000 to $60,000. "In these messages, the third-party offers to help the...

CVE-2026-32444

creationtimestamp| type| source ---|---|--- 2026-08-18 15:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtekysxdfw25 2026-08-18 16:08:09+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtelz3yfma25...

CVE-2026-73351

Unauthenticated Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.1 versions...

EUVD-2026-60778

Unauthenticated Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.1 versions...

CVE-2026-73351 WordPress WordPress Social Login and Register plugin <= 7.8.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.1 versions...

CVE-2026-73351

Unauthenticated XSS affects the WordPress Social Login and Register plugin at version 7.8.1 or earlier (CVSS 7.1, HIGH). No specific affected component or remediation version is provided; update to a newer plugin release when available.

CVE-2026-73351

Unauthenticated Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.1 versions...

TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks

Cybersecurity researchers have disclosed details of a previously undocumented Python implant framework dubbed TWINLOOT. "TWINLOOT is a modular, PyArmor-hardened Python implant designed to operate its entire command-and-control infrastructure inside trusted Microsoft services," Ontinue said in a...

PT-2026-77326

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.169 Description An incorrect reference resolution in Core allows a remote attacker to obtain sensitive information. This is achieved by leveraging social engineering to entice a user to vis...

CVE-2026-74517

creationtimestamp| type| source ---|---|--- 2026-08-17 16:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtc5db4bs62b...

CVE-2026-72299

creationtimestamp| type| source ---|---|--- 2026-08-17 10:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtbj7kku7s2y...

CVE-2026-72200

creationtimestamp| type| source ---|---|--- 2026-08-17 08:40:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtbciwsrdz2e 2026-08-20 08:00:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtiro6xbee2y...

CVE-2026-72137

creationtimestamp| type| source ---|---|--- 2026-08-17 07:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtb7pllmey2j 2026-08-27 03:41:12+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mtzwhpxnee2k 2026-08-27 09:57:55+00:00| seen|...

CVE-2026-16775

The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'id' Shortcode Attribute in all versions up to, and including, 4.9.0 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-13712

The Divi WordPress theme before 5.9.0 does not properly escape some of its Social Media Follow module settings before outputting them in link attributes, allowing users with a role as low as contributor to store JavaScript which will run when a higher privileged user, such as an administrator,...

CVE-2026-13712 Divi 5.0 - 5.8.1 - Contributor+ Stored XSS via Social Media Follow Skype URL

The Divi WordPress theme before 5.9.0 does not properly escape some of its Social Media Follow module settings before outputting them in link attributes, allowing users with a role as low as contributor to store JavaScript which will run when a higher privileged user, such as an administrator,...