CVE-2026-71497

creationtimestamp| type| source ---|---|--- 2026-08-07 08:33:25+00:00| seen| https://gist.github.com/alon710/b4340b7774927252fafb9cfdb5e51a49...

CVE-2026-15032

The Comments WordPress plugin before 7.6.60 does not properly escape a user-supplied URL before outputting it inside an HTML attribute, allowing unauthenticated users to store a Cross-Site Scripting payload that executes in the browser of any user, including administrators, who views the affected...

CVE-2026-16633

creationtimestamp| type| source ---|---|--- 2026-08-07 06:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/117052697803115128 2026-08-07 07:37:49+00:00| seen| https://gist.github.com/alon710/49e34188f9c47f29b61522ee6a9c6906...

CVE-2026-15032

The CVE describes a stored XSS in the Comments WordPress plugin (wpDiscuz) prior to version 7.6.60, where a user-supplied URL is not properly escaped before being output in an HTML attribute. This allows unauthenticated attackers to inject XSS that executes in the browser of any viewer, including...

GHSA-J4R3-HG7J-8CHG

creationtimestamp| type| source ---|---|--- 2026-08-07 05:35:28+00:00| seen| https://gist.github.com/alon710/0c61a6195ede2fd8a0ca10d8b63bbf6e...

CVE-2026-45204

creationtimestamp| type| source ---|---|--- 2026-08-07 04:37:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/itsamjl4gbagk...

CVE-2026-19189

creationtimestamp| type| source ---|---|--- 2026-08-07 04:31:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gi32l2zwypa4l 2026-08-07 12:14:11+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117054167416606582...

CVE-2026-5391

creationtimestamp| type| source ---|---|--- 2026-08-07 03:15:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mshloq3jvz2u...

CVE-2026-19149

creationtimestamp| type| source ---|---|--- 2026-08-07 02:56:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mshkmnjejr2z 2026-08-07 04:46:06+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260807 2026-08-13 09:46:45+00:00| seen|...

CVE-2026-64638

creationtimestamp| type| source ---|---|--- 2026-08-07 01:53:30+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mshh4queez2r 2026-08-07 13:11:54+00:00| seen| https://infosec.exchange/users/tomcat/statuses/117054394427524887 2026-08-07 14:00:04+00:00|...

[SECURITY] Fedora 43 Update: curl-8.15.0-8.fc43

curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

CVE-2026-56161

creationtimestamp| type| source ---|---|--- 2026-08-07 00:56:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mshdw27lmy2l 2026-08-08 08:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msko5er7ni2x 2026-08-11 19:00:40+00:00| seen|...

CVE-2026-50481

creationtimestamp| type| source ---|---|--- 2026-08-07 00:54:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mshdsijkna2l 2026-08-08 05:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mske3i7aa722 2026-08-11 19:00:39+00:00| seen|...

CVE-2026-43631

creationtimestamp| type| source ---|---|--- 2026-08-07 00:37:14+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mshcuej42h2o...

CVE-2026-70558

creationtimestamp| type| source ---|---|--- 2026-08-07 00:36:59+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mshctvj2mq26 2026-08-09 14:00:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msnqodj4ku2w...

EUVD-2026-54184

AIL Framework contains a stored cross-site scripting vulnerability in the crawler domain view. Crawled URLs were embedded directly into the JavaScript onclick handler used to display a stored screenshot, without context-appropriate encoding. An attacker who can cause a specially crafted URL to be...

Linux Distros Unpatched Vulnerability : CVE-2026-71478

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 1.5.0 until 2.9.0, the AttributesExtension's href and src unsafe-link...

CVE-2026-48087

creationtimestamp| type| source ---|---|--- 2026-08-06 23:08:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msh5uwybhi2m 2026-08-09 04:18:16+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msmpzjxjns27 2026-08-09 05:28:38+00:00| seen|...

CVE-2026-71446

AIL Framework contains a stored cross-site scripting vulnerability in the crawler domain view. Crawled URLs were embedded directly into the JavaScript onclick handler used to display a stored screenshot, without context-appropriate encoding. An attacker who can cause a specially crafted URL to be...

DEBIAN-CVE-2026-64653

GitHub CLI gh is GitHub’s official command line tool. Prior to 2.97.0, some HTTP request URLs interpolate variable path components without percent encoding, allowing URL path metacharacters in attacker-controlled repository or resource values to make gh address a different API endpoint or resourc...