PT-2026-1607

Name of the Vulnerable Software and Affected Versions Smart App Banners plugin for WordPress versions prior to 1.3 Description The Smart App Banners plugin for WordPress is susceptible to Stored Cross-Site Scripting. This is due to insufficient input sanitization and output escaping on...

WordPress plugin Smart App Banners 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

WordPress Smart App Banners plugin <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'size' and 'verticalalign' Shortcode Attributes vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'size' and 'verticalalign' Shortcode Attributes vulnerability discovered by Gilang - DJ in WordPress Plugin Smart App Banners versions = 1.2...

CVE-2025-47346

CVE-2025-47346 describes memory corruption when processing a secure logging command in the trusted application on Qualcomm chipsets. The CVSSv3.1 metrics indicate a local, low-complexity attack with no user interaction, resulting in high confidentiality, integrity, and availability impact (CVSS b...

CVE-2025-69086

creationtimestamp| type| source ---|---|--- 2026-01-06 17:22:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbrhp6squb2p 2026-01-06 17:22:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbrhqbfhez2z 2026-01-06 18:02:09+00:00| seen|...

EUVD-2026-1120

Malicious code in smartspacestoreapp npm...

CVE-2026-0580

A vulnerability was found in SourceCodester API Key Manager App 1.0. Affected by this vulnerability is an unknown functionality of the component Import Key Handler. Performing a manipulation results in cross site scripting. The attack can be initiated remotely...

CVE-2025-14996

creationtimestamp| type| source ---|---|--- 2026-01-06 05:43:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbqanetrfw2p 2026-01-06 06:01:28+00:00| seen| Telegram/C8cKa5CH9I3NM3jeEU5QbxYCnFxc-EFqHQ9i2kT9Led6pw 2026-01-06 07:32:43+00:00| seen|...

CVE-2025-15385

Insufficient Verification of Data Authenticity vulnerability in TECNO Mobile com.Afmobi.Boomplayer allows Authentication Bypass.This issue affects com.Afmobi.Boomplayer: 7.4.63...

CVE-2025-15385

Insufficient Verification of Data Authenticity vulnerability in TECNO Mobile com.Afmobi.Boomplayer allows Authentication Bypass.This issue affects com.Afmobi.Boomplayer: 7.4.63...

CVE-2025-69230

creationtimestamp| type| source ---|---|--- 2026-01-06 00:43:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbppvpt5za2o 2026-01-24 21:31:04+00:00| seen| https://gist.github.com/alon710/455290c62352939a2aabb779373c4d79 2026-01-24 21:31:05+00:00| seen|...

GHSA-6MQ8-RVHQ-8WGG

creationtimestamp| type| source ---|---|--- 2026-01-05 22:14:04+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115844791950366444 2026-01-05 23:05:33+00:00| published-proof-of-concept| Telegram/SaQdu2HuKivKnxzQDHW0crSXnl1eIl3nAV9Cs1OYgaU4ueA 2026-01-06 03:55:16+00:00| seen|...

CVE-2025-52517

creationtimestamp| type| source ---|---|--- 2026-01-05 20:39:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbpcb753u22q...

CVE-2025-55204

The CVE-2025-55204 entry concerns the Muffon desktop music client. Affected versions are prior to 2.3.0, where a one-click Remote Code Execution (RCE) vulnerability exists via a specially crafted muffon:// link. When a user visits a page or clicks the link, Muffon’s custom URL handler is triggere...

CVE-2026-0580 SourceCodester API Key Manager App Import Key cross site scripting

A vulnerability was found in SourceCodester API Key Manager App 1.0. Affected by this vulnerability is an unknown functionality of the component Import Key Handler. Performing a manipulation results in cross site scripting. The attack can be initiated remotely...

EUVD-2026-0904

A vulnerability was found in SourceCodester API Key Manager App 1.0. Affected by this vulnerability is an unknown functionality of the component Import Key Handler. Performing a manipulation results in cross site scripting. The attack can be initiated remotely...

CVE-2025-15457

creationtimestamp| type| source ---|---|--- 2026-01-05 06:00:38+00:00| published-proof-of-concept| Telegram/PEDMC-xQRSNOdcRnaiEMJorZFRbVJMF3imIAdH1nAh3lQ 2026-01-05 08:38:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbnzy7hppu2x...

CVE-2025-15455

creationtimestamp| type| source ---|---|--- 2026-01-05 04:32:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbnmac6esn2c 2026-01-05 05:01:22+00:00| published-proof-of-concept| Telegram/tnSVeYZoZ7XDXZtoAg8da9hyH6297qKNo6VluCdDLGMBhU...

CVE-2025-15450

creationtimestamp| type| source ---|---|--- 2026-01-05 03:00:12+00:00| published-proof-of-concept| Telegram/HaYN5VGeDlHBDPVGu-E05573P0whzmUBrl9HLUERZWszU4 2026-01-05 05:00:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbnnsid3wf2q...

WordPress Form to Chat App plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nabil Irawan in WordPress Plugin Form to Chat App versions = 1.2.5...