CVE-2026-11397

creationtimestamp| type| source ---|---|--- 2026-07-03 06:11:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppv7esftr2w 2026-07-03 16:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpqwyyq3yp2k 2026-07-03 20:53:28+00:00| seen|...

CVE-2026-12920

creationtimestamp| type| source ---|---|--- 2026-07-03 06:02:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppuqn3v7h2u 2026-07-03 09:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpq7jyedgu2m 2026-07-03 19:26:14+00:00| seen|...

CVE-2026-11397

The CVE-2026-11397 entry concerns the WordPress plugin WP Import Export Lite (versions

CVE-2026-11397 WP Import Export Lite <= 3.9.30 - Authenticated (Administrator+) Server-Side Request Forgery via 'file_url' Parameter

The WP Import Export Lite plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to and including 3.9.30 via the wpieimportuploadfilefromurl AJAX action. The plugin's URL downloader first calls wpsaferemoteget which correctly blocks private/reserved IP ranges, but wh...

EUVD-2026-41489

The WP Import Export Lite plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to and including 3.9.30 via the wpieimportuploadfilefromurl AJAX action. The plugin's URL downloader first calls wpsaferemoteget which correctly blocks private/reserved IP ranges, but wh...

CVE-2026-11397 WP Import Export Lite <= 3.9.30 - Authenticated (Administrator+) Server-Side Request Forgery via 'file_url' Parameter

The WP Import Export Lite plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to and including 3.9.30 via the wpieimportuploadfilefromurl AJAX action. The plugin's URL downloader first calls wpsaferemoteget which correctly blocks private/reserved IP ranges, but wh...

CVE-2025-69132

creationtimestamp| type| source ---|---|--- 2026-07-03 03:28:33+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppm4ijrkz2y...

CVE-2026-12960

An Improper Export of Android Application Components vulnerability in ASUS Router App allows a third-party application on the same device to send a crafted Intent that causes ASUS Router App to open an specified URL. Refer to the ' Security Update for ASUS Router Android App ' section on the ASUS...

CVE-2026-13050

creationtimestamp| type| source ---|---|--- 2026-07-03 02:48:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppjvl2taw2s 2026-07-03 18:56:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpr7xwm3m52k...

CVE-2026-13728

creationtimestamp| type| source ---|---|--- 2026-07-03 02:45:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppjplxoob2s 2026-07-03 18:56:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpr7x6yb642b...

CVE-2026-13084

creationtimestamp| type| source ---|---|--- 2026-07-03 02:16:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppi32kisz2o 2026-07-03 18:55:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpr7vly4kv2k...

CVE-2026-12960

An Improper Export of Android Application Components vulnerability in ASUS Router App allows a third-party application on the same device to send a crafted Intent that causes ASUS Router App to open an specified URL. Refer to the ' Security Update for ASUS Router Android App ' section on the ASUS...

CVE-2026-12960

An Improper Export of Android Application Components vulnerability in ASUS Router App allows a third-party application on the same device to send a crafted Intent that causes ASUS Router App to open an specified URL. Refer to the ' Security Update for ASUS Router Android App ' section on the ASUS...

CVE-2026-12960

CVE-2026-12960 affects the ASUS Router Android app. The issue is an Improper Export of Android Application Components, where a local third-party app on the same device can send a crafted Intent that causes the ASUS Router App to open a specified URL. CVSS metrics indicate local access, low comple...

CVE-2026-57671

creationtimestamp| type| source ---|---|--- 2026-07-03 00:35:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppcg77jh522...

CVE-2026-57674

creationtimestamp| type| source ---|---|--- 2026-07-03 00:33:02+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppccmtr7a2i 2026-07-31 05:44:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrwaqp4st42q...

CVE-2026-58467

creationtimestamp| type| source ---|---|--- 2026-07-03 00:03:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppaogi76s2i 2026-07-03 15:09:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqtbel3yw2j 2026-09-22 09:00:05+00:00| confirmed|...

CVE-2026-12960: Improper Export of Android Application Components

An Improper Export of Android Application Components vulnerability in ASUS Router App allows a third-party application on the same device to send a crafted Intent that causes ASUS Router App to open an specified URL. Refer to the ' Security Update for ASUS Router Android App ' section on the ASUS...

CVE-2026-27779: Improper Access Control

Gitea versions before 1.25.5 accept malformed or injected forwarded-proto values when detecting public URLs, allowing spoofed canonical URL generation...

CVE-2026-25779: URL Redirection to Untrusted Site

Gitea versions up to and including 1.25.4 allow redirect bypasses through raw or percent-encoded backslashes in redirectto values...