58484 matches found
CVE-2026-11588 EONSR AEO Agent <= 3.7.9 - Unauthenticated Stored XSS via Scheduled Post Creation
The EONSR AEO Agent WordPress plugin through 3.7.9 does not perform any authorisation check on one of its REST API routes and disables HTML sanitisation before saving the post, allowing unauthenticated attackers to create administrator-attributed published posts containing arbitrary web scripts...
CVE-2026-11588
The CVE-2026-11588 entry concerns the EONSR AEO Agent WordPress plugin up to version 3.7.9. The issue arises because there is no authorization check on a REST API route and HTML sanitisation is disabled before saving a post, enabling unauthenticated attackers to create administrator-attributed pu...
CVE-2026-19005 nanocoai NanoClaw Child-Agent Creation create-agent.ts handleCreateAgent privileges management
A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. Affected is the function handleCreateAgent of the file src/modules/agent-to-agent/create-agent.ts of the component Child-Agent Creation. Performing a manipulation results in improper privilege management. Remote exploitation of the...
EUVD-2026-53717
A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. Affected is the function handleCreateAgent of the file src/modules/agent-to-agent/create-agent.ts of the component Child-Agent Creation. Performing a manipulation results in improper privilege management. Remote exploitation of the...
CVE-2026-64545
creationtimestamp| type| source ---|---|--- 2026-08-06 05:16:28+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806...
CVE-2026-17624
creationtimestamp| type| source ---|---|--- 2026-08-06 04:00:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msf5r3poxb2g 2026-08-07 14:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msirs6gned2t...
CVE-2026-18485
creationtimestamp| type| source ---|---|--- 2026-08-06 03:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msf2g2vfjh2z...
GHSA-9473-5F9J-94WQ
creationtimestamp| type| source ---|---|--- 2026-08-06 01:31:21+00:00| seen| https://gist.github.com/alon710/71f7a1bcf3053bbd51b0ae56e484d06e...
CVE-2026-71316
creationtimestamp| type| source ---|---|--- 2026-08-06 00:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mseqdchgvo2t 2026-08-06 04:31:21+00:00| seen| https://gist.github.com/alon710/a33e8f1d3990c5613ef07342bcfbda1b...
GHSA-HXCR-HM88-MPQ6
creationtimestamp| type| source ---|---|--- 2026-08-05 21:31:30+00:00| seen| https://gist.github.com/alon710/ea06609eb056fc8864effae3b0dc1b95...
CVE-2026-71314
creationtimestamp| type| source ---|---|--- 2026-08-05 21:31:30+00:00| seen| https://gist.github.com/alon710/ea06609eb056fc8864effae3b0dc1b95 2026-08-05 22:00:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msejmrvz752z...
CVE-2026-71318
Nuxt (Vue.js framework) is affected in versions 3.1.0 through 3.21.10 and 4.5.1 where a top-level as prop to the /__nuxt_island/ endpoint can drive dynamic component resolution via , resolveDynamicComponent, or h(). This allows potential unauthorized component instantiation as described in the CV...
CVE-2026-16143
creationtimestamp| type| source ---|---|--- 2026-08-05 21:15:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mseh43v6iu23...
CVE-2026-68004
creationtimestamp| type| source ---|---|--- 2026-08-05 21:00:03+00:00| seen| Telegram/lFoBJsBJrsgLmESCPhvSqV0oex82MROWaDEk0EpTuUjmgWw 2026-08-06 00:00:09+00:00| published-proof-of-concept| Telegram/lFoBJsBJrsgLmESCPhvSqV0oex82MROWaDEk0EpTuUjmgWw...
rclone: Infinite Scale TUS Creation Transport Error Causes a Nil-Response Panic
Summary A transport failure during the initial Infinite Scale TUS creation POST can return nil response, non-nil error. Rclone dereferences the nil response before processing the error and panics. The production CreateUploader path reproduced the crash against a closed endpoint. The security...
CVE-2026-68746
creationtimestamp| type| source ---|---|--- 2026-08-05 20:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msedzmklik2b...
CVE-2026-70615
boringproxy through 0.10.0 contains a newline injection vulnerability that allows authenticated low-privileged users with tunnel-creation permission to inject arbitrary lines into the server account's SSH authorizedkeys file by supplying a percent-encoded newline character in the domain parameter...
CVE-2026-13379
creationtimestamp| type| source ---|---|--- 2026-08-05 20:02:01+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mseczde4ai2g...