CVE-2026-32421: Missing Authorization

Missing Authorization vulnerability in Agile Logix Post Timeline post-timeline allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Timeline: from n/a through = 2.4.1...

WordPress plugin Post Timeline 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

PT-2026-25267

Missing Authorization vulnerability in Agile Logix Post Timeline post-timeline allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Timeline: from n/a through = 2.4.1...

CVE-2023-5652

creationtimestamp| type| source ---|---|--- 2026-03-12 21:02:35+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mgvcd3jmx52q...

CVE-2026-3060

creationtimestamp| type| source ---|---|--- 2026-03-12 11:15:59+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3060 2026-03-12 15:34:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgupzayjtm24 2026-03-12 16:17:49+00:00| seen|...

kernel: drm/xe: Make dma-fences compliant with the safe access rules

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Make dma-fences compliant with the safe access rules Xe can free some of the data pointed to by the dma-fences it exports. Most notably the timeline name can get freed if userspace closes the associated submit queue. At t...

kernel: drm/xe: Make dma-fences compliant with the safe access rules

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Make dma-fences compliant with the safe access rules Xe can free some of the data pointed to by the dma-fences it exports. Most notably the timeline name can get freed if userspace closes the associated submit queue. At t...

kernel: drm/xe: Make dma-fences compliant with the safe access rules

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Make dma-fences compliant with the safe access rules Xe can free some of the data pointed to by the dma-fences it exports. Most notably the timeline name can get freed if userspace closes the associated submit queue. At t...

CVE-2026-28451

creationtimestamp| type| source ---|---|--- 2026-03-07 12:07:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mghs3af4py2c...

CVE-2025-14675

creationtimestamp| type| source ---|---|--- 2026-03-07 09:27:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mghj627mz72u...

CVE-2026-25071

creationtimestamp| type| source ---|---|--- 2026-03-07 03:24:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgguuiwwgc2n...

CVE-2025-69411

creationtimestamp| type| source ---|---|--- 2026-03-05 17:23:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgdcse2pj525 2026-04-19 21:03:03+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mjuu2zgek52g...

WordPress Post Timeline plugin <= 2.4.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Alexis Lafontaine in WordPress Plugin Post Timeline versions = 2.4.1...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection in the ORDER BY parameter supplied to the getTimelineResults function via the Contact Activity timeline API endpoint. Remediation Upgrade mautic/core-lib to version 5.2.10, 6.0.8, 7.0.1 or higher. References - GitHub Commi...

CVE-2026-25131

creationtimestamp| type| source ---|---|--- 2026-02-25 02:18:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfnmjzxfzu2s 2026-02-25 02:57:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfnophssvg2u 2026-02-25 18:40:10+00:00| seen|...

CVE-2026-3105: Improper Neutralization of Special Elements used in an SQL Command

SummaryThis advisory addresses a SQL injection vulnerability in the API endpoint used for retrieving contact activities. A vulnerability exists in the query construction for the Contact Activity timeline where the parameter responsible for determining the sort direction was not strictly validated...

PT-2026-39060

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak exists in the amdgpu userq wait ioctl function. The issue occurs when the ioctl is aborted because the output array is too small, failing to drop references to the synco...

CVE-2025-69384

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdiscover Timeline Event History timeline-event-history allows Reflected XSS.This issue affects Timeline Event History: from n/a through = 3.2...

CVE-2024-9012

creationtimestamp| type| source ---|---|--- 2026-02-21 06:48:02+00:00| seen| https://gist.github.com/aurixai-solutions/313b026594574c70a22f8d72ef7c665b...

CVE-2026-27198

creationtimestamp| type| source ---|---|--- 2026-02-21 06:18:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfdy33ul632n 2026-03-04 09:40:11+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mg7yhlduxd2m...