CVE-2026-48093 Code Embed - Contributor Stored Cross-Site Scripting via Remote URL Embed

The Code Embed WordPress plugin prior to version 2.6.1 is vulnerable to stored Cross-Site Scripting XSS through the external URL embed feature in post content. The vulnerable code scans rendered content for URL embed tokens, fetches the remote URL, and inserts the remote response body into the pa...

CVE-2026-43622

creationtimestamp| type| source ---|---|--- 2026-08-06 16:22:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/detkkxrgg2ojd 2026-08-06 19:00:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgpzhgv6y2n...

CVE-2026-53985

creationtimestamp| type| source ---|---|--- 2026-08-06 16:20:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3fddtrz4hv643 2026-08-06 17:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgjear6dd2n...

CVE-2025-14469

creationtimestamp| type| source ---|---|--- 2026-08-01 17:07:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzxfsnjdi2x 2026-08-01 17:08:01+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzxgj4qb22b...

CVE-2026-57862 Kanboard 1.2.52 and prior SSRF Filter Bypass via Hexadecimal IP Notation

Kanboard 1.2.52 and prior contains a server-side request forgery vulnerability that allows authenticated users to bypass SSRF protections by supplying hexadecimal IP address notation in user-controlled URLs. Attackers can submit hexadecimal-encoded internal IP addresses through the web link...

CVE-2026-17543

creationtimestamp| type| source ---|---|--- 2026-07-30 12:11:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gcuw5bgc4gwsk 2026-07-30 12:49:14+00:00| seen| https://bsky.app/profile/remirepo.net/post/3mruhzvp5622t 2026-07-30 13:29:27+00:00| seen|...

CVE-2026-12981

creationtimestamp| type| source ---|---|--- 2026-07-24 07:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116973779458861264 2026-07-24 07:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mretgfvnq42h 2026-07-24 21:52:27+00:00| seen|...

CVE-2026-57859

creationtimestamp| type| source ---|---|--- 2026-07-20 23:39:51+00:00| seen| https://gist.github.com/sermikr0/6f68b5bcfc1024269f1cd032abb55a0f 2026-07-21 00:00:00+00:00| seen| https://gist.github.com/sermikr0/6f68b5bcfc1024269f1cd032abb55a0f...

CVE-2026-61424

creationtimestamp| type| source ---|---|--- 2026-07-20 19:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr42vbmbff2u 2026-07-20 21:29:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4agkeocy2q 2026-07-30 22:00:03+00:00| seen|...

CVE-2026-44023 Docling Core has unsafe remote filename resolution

Docling Core defines core data types and transformations for the document processing application Docling. In versions 1.5.0 and above, prior to 2.74.1, docling-core did not sufficiently restrict remote request destinations and could resolve a server-provided Content-Disposition to a local path in...

CVE-2026-46512

creationtimestamp| type| source ---|---|--- 2026-07-16 18:52:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqrvrushsg2x 2026-07-16 19:47:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqryvgoskh2u...

CVE-2026-15143

creationtimestamp| type| source ---|---|--- 2026-07-10 16:01:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcjgg6g4b26 2026-07-10 16:46:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqclx3547y2b 2026-07-10 22:19:41+00:00| seen|...

CVE-2026-14245

creationtimestamp| type| source ---|---|--- 2026-07-09 09:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116889198686002131 2026-07-09 09:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mq7bhkabxp24 2026-07-09 22:30:57+00:00| seen|...

GO-2026-5681 Hugo: security.http.urls allow-list bypass via HTTP redirects in github.com/gohugoio/hugo

Hugo: security.http.urls allow-list bypass via HTTP redirects in github.com/gohugoio/hugo...

CVE-2026-34037

creationtimestamp| type| source ---|---|--- 2026-07-07 04:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpzpxpr5wr2h 2026-07-07 04:21:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzqxmsj2d2u 2026-07-07 04:30:26+00:00| seen|...

CVE-2026-5137

creationtimestamp| type| source ---|---|--- 2026-07-03 23:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mprohzoe242j 2026-07-03 23:46:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprq5zrrvf2f 2026-07-03 23:46:22+00:00| seen|...

CVE-2026-14076

creationtimestamp| type| source ---|---|--- 2026-07-02 01:45:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmvunbqlz22 2026-07-02 01:45:08+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmvun6jo72s 2026-07-02 07:51:36+00:00| seen|...

CVE-2026-12408

creationtimestamp| type| source ---|---|--- 2026-07-01 09:13:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpl6i4ugm52b 2026-07-01 11:39:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplgndvkxf2b 2026-07-01 12:30:35+00:00| seen|...

CVE-2026-22078

creationtimestamp| type| source ---|---|--- 2026-06-29 09:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116832575628329249 2026-06-29 09:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpg4sdsfah27 2026-06-29 11:36:08+00:00| seen|...

CVE-2026-13515

creationtimestamp| type| source ---|---|--- 2026-06-29 00:00:45+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpf6mzfwn52e 2026-06-29 00:27:13+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpfa4kbvgq2c 2026-06-29 02:23:35+00:00| seen|...