CVE-2026-55175

creationtimestamp| type| source ---|---|--- 2026-07-11 00:01:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqdeavyazf2r 2026-07-11 00:22:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqdfh5qn6w2x 2026-07-11 03:51:26+00:00| seen|...

PT-2026-57374

The Points and Rewards for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.10.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with...

PT-2026-64157

Name of the Vulnerable Software and Affected Versions FFmpeg versions 3.0 through 8.1.2 Description An out-of-bounds write exists in the vf swaprect video filter. This occurs when the filter frame function reuses a temporary row buffer sized for plane 0's single-byte pixel step across all planes...

go1.26-1.26.5-1.1 on GA media (moderate)

go1.26-1.26.5-1.1 on GA media Announcement ID: openSUSE-SU-2026:11232-1 Rating: moderate Cross-References: CVE-2026-39822 CVE-2026-42505 CVSS scores: CVE-2026-39822 SUSE : 7.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H CVE-2026-42505 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N...

GHSA-56MP-4F3V-FGJ2

creationtimestamp| type| source ---|---|--- 2026-07-10 23:42:38+00:00| seen| https://gist.github.com/alon710/215bfec609456ef9029abde8936c9791 2026-07-11 00:01:00+00:00| seen| https://gist.github.com/alon710/215bfec609456ef9029abde8936c9791...

CVE-2026-58493

creationtimestamp| type| source ---|---|--- 2026-07-10 23:12:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdbjkqork2e 2026-07-10 23:12:21+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqdbjpxfje27 2026-07-10 23:45:01+00:00| seen|...

CVE-2026-55781

creationtimestamp| type| source ---|---|--- 2026-07-10 23:10:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdbgwznhp2d 2026-07-10 23:29:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdchmwk5w2x 2026-09-17 06:00:04+00:00| published-proof-of-concept|...

CVE-2026-59162

creationtimestamp| type| source ---|---|--- 2026-07-10 23:09:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdbfhhklg2a 2026-07-10 23:13:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdblki2rc27 2026-07-10 23:45:18+00:00| seen|...

CVE-2026-3251

creationtimestamp| type| source ---|---|--- 2026-07-10 22:56:00+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqdamij56426 2026-07-10 22:56:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdamjacrt2a 2026-07-11 00:13:37+00:00| seen|...

CVE-2026-55638

creationtimestamp| type| source ---|---|--- 2026-07-10 22:49:02+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdaa2jkj22a 2026-07-10 23:39:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdczk2d552e 2026-07-11 19:00:45+00:00| seen|...

CVE-2026-8595

creationtimestamp| type| source ---|---|--- 2026-07-10 22:18:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd6k6jia32c 2026-07-10 22:49:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdabfyz4f2y 2026-07-11 00:16:40+00:00| seen|...

CVE-2026-55187

Mailpit is an email testing tool and API for developers. Prior to 1.30.2, the remediation shipped for CVE-2026-27808 is incomplete because the tools.IsInternalIP deny-list in internal/tools/net.go relies on Go's standard library classification helpers and does not block IPv6 transition mechanisms...

CVE-2026-13244

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Tealium iQ Tag Management allows Object Injection. This issue affects Tealium iQ Tag Management versions: from 0.0.0 to 2.4.0...

CVE-2026-46388

creationtimestamp| type| source ---|---|--- 2026-07-10 22:10:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd637jh5c2e 2026-07-10 23:38:33+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdcylyadf27...

CVE-2026-15374

creationtimestamp| type| source ---|---|--- 2026-07-10 22:10:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd62hzrn727 2026-07-10 22:38:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd7n572pl2x 2026-07-11 00:15:42+00:00| seen|...

CVE-2026-57807

creationtimestamp| type| source ---|---|--- 2026-07-10 22:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqd5js45ha2w 2026-07-10 23:20:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqdbxlqail22 2026-07-11 02:32:44+00:00| seen|...

CVE-2026-15084

The Drupal UI Patterns (SDC in Drupal UI) module, specifically versions 2.0.0 through 2.0.17 , is vulnerable to Stored Cross-site Scripting (XSS) . The root cause is that the module fails to sufficiently sanitize markup passed to components under certain scenarios. An attacker with permissions to...

CVE-2026-15084 UI Patterns (SDC in Drupal UI) - Moderately critical - Cross site scripting - SA-CONTRIB-2026-075

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal UI Patterns SDC in Drupal UI allows Stored XSS. This issue affects UI Patterns SDC in Drupal UI versions: from 2.0.0 to 2.0.17...

CVE-2026-58591 Colorbox - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-069

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Colorbox allows Cross-Site Scripting XSS. This issue affects Colorbox versions: from 0.0.0 to 2.1.5, from 0.0.0 to 2.2.0...

CVE-2026-12535 Formatter Field - Critical - PHP object injection - SA-CONTRIB-2026-048

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Formatter Field allows Object Injection. This issue affects Formatter Field versions: from 0.0.0 to 2.0.0...