CVE-2026-66424

CVE-2026-66424 affects the WordPress plugin SMS Alert Order Notifications (versions

EUVD-2026-57860

Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.7 versions...

CVE-2026-66424

Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.7 versions...

MAL-2026-13792 Malicious code in chmjdsidwlf5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5c33467a3378e72f39a5093bded42a1aba6c08cca38cd631ea1ecc233e0377a Package [email protected] contains 2 files with no a static rule matches and no traced behavior indicating exfiltration, install-time remote code...

...[ More ]

A proof of concept exploit for an authorization bypass vulnerability in Grafana version 13.1.3. The vulnerability allows an authenticated Editor to delete a protected alert notification receiver despite lacking the permission required to modify its protected destination fields. The receivers upda...

CVE-2021-34510

creationtimestamp| type| source ---|---|--- 2026-08-10 19:06:25+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3msqsajnx622q...

openjdk: Enhance TLS certificate handling (Oracle CPU 2026-07)

A flaw was found in OpenJDK. When a server has wantClientAuth and the client sends a nocertificate alert, any client certificates are not verified...

CVE-2026-19358

creationtimestamp| type| source ---|---|--- 2026-08-09 20:15:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-19358...

CVE-2026-42170

creationtimestamp| type| source ---|---|--- 2026-08-08 18:50:39+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mslqghmhwu2g...

CVE-2026-68081

creationtimestamp| type| source ---|---|--- 2026-08-08 17:16:51+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117061019969205182 2026-08-18 23:18:24+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3mtfe2ezqnc24...

CVE-2026-14226

creationtimestamp| type| source ---|---|--- 2026-08-08 13:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msl5qcqvzy2a...

CVE-2026-71849

creationtimestamp| type| source ---|---|--- 2026-08-07 23:35:49+00:00| seen| https://gist.github.com/alon710/5988f40586bcc25ff4d614f1ea49845f 2026-08-08 00:02:49+00:00| seen| https://gist.github.com/alon710/5988f40586bcc25ff4d614f1ea49845f...

CVE-2026-11425

Domoticz Mobile Dashboard (versions before 2026.3) is affected by a stored XSS via Text/Alert device rendering. An authenticated attacker can update Text or Alert device values through the API to inject HTML/JavaScript, which is then rendered by ng-bind-html without proper escaping. This can exec...

CVE-2026-11425 Domoticz Mobile Dashboard versions prior to 2026.3 Stored XSS via Text/Alert Device Rendering

Domoticz versions prior to 2026.3 contains a stored cross-site scripting vulnerability in the mobile dashboard that allows authenticated attackers to inject arbitrary HTML and JavaScript by updating Text or Alert subtype device values through the API. The mobile dashboard renders device data via...

CVE-2026-11425 Domoticz Mobile Dashboard versions prior to 2026.3 Stored XSS via Text/Alert Device Rendering

Domoticz versions prior to 2026.3 contains a stored cross-site scripting vulnerability in the mobile dashboard that allows authenticated attackers to inject arbitrary HTML and JavaScript by updating Text or Alert subtype device values through the API. The mobile dashboard renders device data via...

CVE-2026-70332

creationtimestamp| type| source ---|---|--- 2026-08-07 00:39:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4lj3nhvrrea35 2026-08-07 01:06:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mshehxaaht2a 2026-08-07 01:30:27+00:00| seen|...

CVE-2026-3430

creationtimestamp| type| source ---|---|--- 2026-08-06 17:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgjehd5472n...

CVE-2026-16316

OMICRON StationGuard 4.00 contains an improper input validation vulnerability in its IEC 61850 Sampled Values SV frame processing. A specially crafted SV frame can cause the affected process to terminate, disrupting alert processing for Sampled Values traffic. The vulnerability does not affect...

WordPress SMS Alert Order Notifications plugin <= 3.9.7 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Aydan Arabadzha in WordPress Plugin SMS Alert Order Notifications versions = 3.9.7...

EUVD-2026-53922

OMICRON StationGuard 4.00 contains an improper input validation vulnerability in its IEC 61850 Sampled Values SV frame processing. A specially crafted SV frame can cause the affected process to terminate, disrupting alert processing for Sampled Values traffic. The vulnerability does not affect...