26742 matches found
CVE-2026-84327
creationtimestamp| type| source ---|---|--- 2026-09-02 00:12:56+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117198551537914778 2026-09-02 04:46:35+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260902 2026-09-04 04:45:51+00:00| seen|...
Monobank payment API - Moderately critical - Access bypass - SA-CONTRIB-2026-130
The Monobank payment API module provides integration with Monobank acquiring payments. The module did not verify the Monobank webhook signature before processing payment status callbacks...
CVE-2026-81426: Cross-Site Request Forgery (CSRF)
The WC Vendors WordPress plugin before 2.7.2.1 does not have CSRF protection on some of its front-end order shipment status actions, which could allow attackers to make a logged-in vendor change the shipment status of their own orders via a crafted request...
CVE-2026-81427: Missing Authorization
The WC Vendors WordPress plugin before 2.7.2.1 does not verify that the vendor submitting a front-end order shipment status change owns the referenced order, allowing any authenticated vendor to mark another vendor's order as shipped, add an order note falsely attributed to the victim vendor, and...
PT-2026-84633
The WC Vendors WordPress plugin before 2.7.2.1 does not have CSRF protection on some of its front-end order shipment status actions, which could allow attackers to make a logged-in vendor change the shipment status of their own orders via a crafted request...
PT-2026-84751
The WP Express Checkout WordPress plugin before 2.4.9 does not verify server-side that a payment was actually completed before marking an order as paid, allowing unauthenticated users to forge a completed order without paying...
PT-2026-84634
The WC Vendors WordPress plugin before 2.7.2.1 does not verify that the vendor submitting a front-end order shipment status change owns the referenced order, allowing any authenticated vendor to mark another vendor's order as shipped, add an order note falsely attributed to the victim vendor, and...
PT-2026-84982
Name of the Vulnerable Software and Affected Versions util-linux versions prior to 2.41.6 util-linux version 2.42.2 Description The software fails to verify the exit status of mount helpers before executing post-mount hooks. This allows unprivileged users to perform privileged operations on...
CVE-2026-84482
creationtimestamp| type| source ---|---|--- 2026-09-01 23:02:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dkpruwnoj7oab...
CVE-2026-84470
creationtimestamp| type| source ---|---|--- 2026-09-01 21:37:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fzprk45m7clv5...
CVE-2026-84370
creationtimestamp| type| source ---|---|--- 2026-09-01 21:29:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/a6zdr2p3ak4i6 2026-09-01 22:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muigafg7a724...
CVE-2021-23995
creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:46+00:00| seen| https://t.me/hackingAttack/5839 2026-09-02 01:03:22+00:00| seen| https://t.me/hackingAttack/5839 2026-09-08 10:00:06+00:00| seen| https://t.me/hackingAttack/5839 2026-09-09 00:00:33+00:00| seen|...
CVE-2021-1275
creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:44+00:00| seen| https://t.me/hackingAttack/7641 2026-09-02 01:03:19+00:00| seen| https://t.me/hackingAttack/7641 2026-09-08 08:00:06+00:00| seen| https://t.me/hackingAttack/7641 2026-09-09 00:00:37+00:00| seen|...
CVE-2021-1506
creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:44+00:00| seen| https://t.me/hackingAttack/7641 2026-09-02 01:03:19+00:00| seen| https://t.me/hackingAttack/7641 2026-09-08 08:00:06+00:00| seen| https://t.me/hackingAttack/7641 2026-09-09 00:00:37+00:00| seen|...
GHSA-CMCX-XHR8-3W9P
creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:31+00:00| seen| https://t.me/hackingAttack/17172 2026-09-02 01:03:05+00:00| seen| https://t.me/hackingAttack/17172 2026-09-07 22:00:05+00:00| seen| https://t.me/hackingAttack/17172 2026-09-08 00:00:10+00:00| seen|...
CVE-2020-5243
creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:31+00:00| seen| https://t.me/hackingAttack/17172 2026-09-01 20:02:32+00:00| seen| https://t.me/hackingAttack/17160 2026-09-02 01:03:05+00:00| seen| https://t.me/hackingAttack/17172 2026-09-02 01:03:06+00:00| seen|...
CVE-2021-35343
creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:30+00:00| seen| https://t.me/hackingAttack/18681 2026-09-02 01:03:04+00:00| seen| https://t.me/hackingAttack/18681 2026-09-07 22:00:07+00:00| published-proof-of-concept| https://t.me/hackingAttack/18681 2026-09-08 00:00:23+00:00|...
CVE-2021-29011
creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:24+00:00| seen| https://t.me/hackingAttack/23332 2026-09-02 01:02:56+00:00| seen| https://t.me/hackingAttack/23332 2026-09-07 17:00:04+00:00| seen| https://t.me/hackingAttack/23332 2026-09-08 00:00:39+00:00| seen|...
CVE-2022-22008
creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:44+00:00| seen| https://t.me/hackingAttack/49993 2026-09-02 01:01:57+00:00| seen| https://t.me/hackingAttack/49993 2026-09-06 00:00:12+00:00| seen| https://t.me/hackingAttack/49993...
CVE-2015-2705
creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:06+00:00| seen| https://t.me/hackingAttack/85770 2026-09-02 01:01:27+00:00| seen| https://t.me/hackingAttack/85770 2026-09-05 01:00:08+00:00| published-proof-of-concept| https://t.me/hackingAttack/85770...