CVE-2026-24213

creationtimestamp| type| source ---|---|--- 2026-05-20 05:06:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmb52im2xs2i 2026-05-20 19:07:57+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmcm2bqg2p2o 2026-06-22 00:19:52+00:00| seen|...

CVE-2026-34744

creationtimestamp| type| source ---|---|--- 2026-05-20 03:32:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmaxtnq2ck2t...

CVE-2026-35593

creationtimestamp| type| source ---|---|--- 2026-05-20 02:53:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmavmn245y2r...

CVE-2026-8493

creationtimestamp| type| source ---|---|--- 2026-05-20 02:50:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmavhqnpz72i...

CVE-2025-15369 Xpro Addons — 140+ Widgets for Elementor <= 1.5.0 - Missing Authorization to Unauthenticated Xpro Template Creation

The Xpro Addons — 140+ Widgets for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the getcontenteditor function in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated attackers to create...

CVE-2025-15369

CVE-2025-15369 affects the WordPress plugin Xpro Addons — 140+ Widgets for Elementor. All versions up to and including 1.5.0 are vulnerable due to a missing capability check in the get_content_editor function, enabling unauthenticated attackers to modify data and create published Xpro templates. ...

CVE-2025-15369 Xpro Addons — 140+ Widgets for Elementor <= 1.5.0 - Missing Authorization to Unauthenticated Xpro Template Creation

The Xpro Addons — 140+ Widgets for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the getcontenteditor function in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated attackers to create...

CVE-2026-6391

The Sentence To SEO keywords, description and tags plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the createadminpage function. This makes it possible for unauthenticated attackers...

CVE-2026-46727

creationtimestamp| type| source ---|---|--- 2026-05-20 00:39:53+00:00| seen| https://bsky.app/profile/k0kubun.com/post/3mmao5vq6wc25 2026-05-21 02:33:02+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3mmdetqhuk22x 2026-05-21 08:01:48+00:00| seen|...

CVE-2026-44790

creationtimestamp| type| source ---|---|--- 2026-05-20 00:16:19+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mmamu5rnds2m 2026-06-27 10:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpbbbc4iiu2n...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-021551)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-021551 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: avoid crash when inline data creation follows DIO write When inode is created and written t...

PT-2026-42247

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.5.38 Description An issue exists in the ShadowAttribute proposal creation workflow where the add action accepts user-controlled request data without removing the id field before saving the record. Since the underlying...

oci-utils security update

-- 0.14.0-22 - Rework systemd service file creation. Orabug: 39316494...

PT-2026-42370

monetr: Server-side request forgery in Lunch Flow link creation and refresh in github.com/monetr/monetr...

XWiki Platform 安全漏洞

The XWiki Platform is an open-source wiki platform used for creating web collaboration applications. Vulnerabilities exist in versions of the XWiki Platform prior to 18.1.0-rc-1, 17.10.3, 17.4.9, and 16.10.17. These vulnerabilities stem from the POST /wikis/wikiName API not performing...

CVE-2026-4885

creationtimestamp| type| source ---|---|--- 2026-05-19 23:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mmakf6zijh2a 2026-05-21 12:00:07+00:00| seen| https://t.me/GithubRedTeam/85211 2026-05-21 15:00:17+00:00| seen| Telegram/w5uXU2fuLydowGU1SOSgKNWyV15qQF5OtJmcXbqSodLps...

CVE-2026-32814

creationtimestamp| type| source ---|---|--- 2026-05-19 23:27:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmak4oejsn2i...

CVE-2025-57798

creationtimestamp| type| source ---|---|--- 2026-05-19 23:22:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmajtpw52s2k...

CVE-2026-34390

creationtimestamp| type| source ---|---|--- 2026-05-19 22:47:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmahvrbr6c2t...

CVE-2026-34579 MantisBT has an authorization bypass via private issue monitoring

Mantis Bug Tracker MantisBT is an open source issue tracker. Versions 2.28.1 and prior are vulnerable to Authorization Bypass through the private issue monitoring feature . Using a crafted POST request to bugmonitoradd.php, a user with project-level access can add themselves as a monitor for a...