117353 matches found
CVE-2026-43999
creationtimestamp| type| source ---|---|--- 2026-05-01 20:43:02+00:00| published-proof-of-concept| https://github.com/patriksimek/vm2/security/advisories/GHSA-947f-4v7f-x2v8 2026-05-23 00:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmi5qkcs7o2r...
CVE-2026-44006
creationtimestamp| type| source ---|---|--- 2026-05-01 20:40:54+00:00| published-proof-of-concept| https://github.com/patriksimek/vm2/security/advisories/GHSA-qcp4-v2jj-fjx8 2026-05-13 21:49:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlrbtta76z2i 2026-05-18 14:18:11+00:00|...
CVE-2026-23866
Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for iOS v2.25.8.0 to v2.26.15.72 and WhatsApp for Android v2.25.8.0 to v2.26.7.10 could have allowed a user to trigger processing of media content from an arbitrary URL on another user’s device, including triggerin...
CVE-2026-23866
Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for iOS v2.25.8.0 to v2.26.15.72 and WhatsApp for Android v2.25.8.0 to v2.26.7.10 could have allowed a user to trigger processing of media content from an arbitrary URL on another user’s device, including triggerin...
CVE-2026-23866
Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for iOS v2.25.8.0 to v2.26.15.72 and WhatsApp for Android v2.25.8.0 to v2.26.7.10 could have allowed a user to trigger processing of media content from an arbitrary URL on another user’s device, including triggerin...
yggdrasil security update
An update is available for yggdrasil. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list yggdrasil is a system daemon that subscribes to topics on an MQTT broker a...
CVE-2026-7567
creationtimestamp| type| source ---|---|--- 2026-05-01 11:11:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkrymnukmi2p 2026-05-02 08:00:04+00:00| seen| https://t.me/GithubRedTeam/82445 2026-05-02 11:00:10+00:00| seen| Telegram/tQatHScNUYuJveIo384qXaKUGUcjtuIRc0ZjHeoPypmQ...
WordPress URL Shortify – Simple and Easy URL Shortener plugin <= 1.10.4 - Unauthenticated Reflected Cross-Site Scripting vulnerability
Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin URL Shortify versions = 1.10.4...
CLSA-2026-1777626401 python3: Fix of 3 CVEs
CVE-2026-6100: clear dangling nextin pointer on MemoryError in bz2/lzma decompressors to avoid use-after-free on instance reuse - CVE-2026-4786: validate the post-substitution URL in webbrowser UnixBrowser.open so that "%action" cannot smuggle a dash-prefixed flag past the CVE-2026-4519...
CVE-2026-42996
creationtimestamp| type| source ---|---|--- 2026-05-01 08:26:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkrpf7bg2x2c...
CVE-2026-7554
creationtimestamp| type| source ---|---|--- 2026-05-01 06:34:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkrj4t5cpo2q...
CVE-2024-13362
Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...
CVE-2024-13362 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...
CVE-2024-13362
CVE-2024-13362 concerns Freemius versions <= 2.10.1 used in multiple WordPress plugins/themes. The flaw is a reflected DOM-based XSS via the url parameter , caused by insufficient input sanitization and output escaping. Consequences: unauthenticated attackers could cause a user to execute arbi...
EUVD-2024-55564
Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...
CVE-2024-13362 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...
CVE-2026-6867
creationtimestamp| type| source ---|---|--- 2026-05-01 04:48:37+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116497508849363061...
CVE-2026-7518
creationtimestamp| type| source ---|---|--- 2026-05-01 03:10:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkr5qotwgs2k...
CVE-2026-5656
creationtimestamp| type| source ---|---|--- 2026-05-01 02:41:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkr44hnomy2q 2026-05-03 10:37:15+00:00| seen| https://t.me/itarmyofrussianews/379...