CVE-2017-3110

creationtimestamp| type| source ---|---|--- 2026-05-13 05:25:03+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3mlpktt6cdy2i...

CVE-2025-9988 Broadstreet <= 1.53.1 - Missing Authorization to Authenticated (Subscriber+) Advertiser Creation

The Broadstreet plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the createadvertiser AJAX action in all versions up to, and including, 1.53.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create...

CVE-2025-9988 Broadstreet <= 1.53.1 - Missing Authorization to Authenticated (Subscriber+) Advertiser Creation

The Broadstreet plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the createadvertiser AJAX action in all versions up to, and including, 1.53.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create...

CVE-2025-9988

CVE-2025-9988 affects the WordPress Broadstreet plugin (versions

CVE-2026-44260

creationtimestamp| type| source ---|---|--- 2026-05-13 03:46:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlpfd2cuim2q...

CVE-2026-45225

creationtimestamp| type| source ---|---|--- 2026-05-13 03:46:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlpfcs6lej2z...

CVE-2026-41901

creationtimestamp| type| source ---|---|--- 2026-05-13 01:34:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlp5xdbnw42p 2026-05-13 03:10:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlpddjlakx2w...

CVE-2026-1934

creationtimestamp| type| source ---|---|--- 2026-05-13 01:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlp5v3jg5j2c...

CVE-2026-8199

creationtimestamp| type| source ---|---|--- 2026-05-13 01:26:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlp5ilhpuq2e...

F5 BIG-IP和F5 BIG-IQ 命令注入漏洞

F5 BIG-IP and F5 BIG-IQ are both products from the American company F5. F5 BIG-IP is an application delivery platform that integrates functions such as network traffic management, application security management, and load balancing. F5 BIG-IQ is a software-based cloud management solution. This...

PT-2026-40559

The Broadstreet plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the create advertiser AJAX action in all versions up to, and including, 1.53.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create...

CVE-2026-6959

creationtimestamp| type| source ---|---|--- 2026-05-12 23:25:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlowr76vsy2n...

CVE-2026-42156 Flowsint: Cypher query injection in node type on node creation

Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification. Prior to 1.2.3, a remote attacker can create a node with a malicious type that can escape an existing Cypher query and an adversary can execute an arbitrary Cypher...

CVE-2026-42156 Flowsint: Cypher query injection in node type on node creation

Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification. Prior to 1.2.3, a remote attacker can create a node with a malicious type that can escape an existing Cypher query and an adversary can execute an arbitrary Cypher...

CVE-2026-42156

Summary : CVE-2026-42156 affects Flowsint, an open-source OSINT graph exploration tool. Before version 1.2.3, a remote attacker can create a node with a malicious type that can escape an existing Cypher query, enabling execution of arbitrary Cypher queries. The issue is fixed in 1.2.3. Impact and...

CVE-2026-42156 Flowsint: Cypher query injection in node type on node creation

Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification. Prior to 1.2.3, a remote attacker can create a node with a malicious type that can escape an existing Cypher query and an adversary can execute an arbitrary Cypher...

CVE-2026-44874

creationtimestamp| type| source ---|---|--- 2026-05-12 22:59:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlovchzeil2k...

CVE-2026-44864

creationtimestamp| type| source ---|---|--- 2026-05-12 22:57:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlov74etf22p...

UBUNTU-CVE-2026-8449

Rejected reason: This CVE ID has been rejected or withdrawn...

CVE-2026-44011

Craft CMS is a content management system CMS. From 4.0.0 to before 4.17.12 and 5.9.18, Craft CMS which contains an input-handling flaw in a Yii object creation path that let any authenticated user inject malicious configuration and execute arbitrary commands on the server. The request-controlled...