59062 matches found
CVE-2026-7572
creationtimestamp| type| source ---|---|--- 2026-05-06 05:18:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5x7pog4m2p...
CVE-2025-71251
creationtimestamp| type| source ---|---|--- 2026-05-06 05:14:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5wxzav3o2k 2026-05-06 05:52:58+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3ml5z5cy5xw2v 2026-05-06 19:02:57+00:00| seen|...
CVE-2026-2306 Ninja Tables <= 5.2.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Table Creation
The Ninja Tables – Easy Data Table Builder plugin for WordPress is vulnerable to unauthorized database table creation due to missing authorization checks on the createFluentCartTable function in all versions up to, and including, 5.2.6. This makes it possible for authenticated attackers, with...
CVE-2026-2306 Ninja Tables <= 5.2.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Table Creation
The Ninja Tables – Easy Data Table Builder plugin for WordPress is vulnerable to unauthorized database table creation due to missing authorization checks on the createFluentCartTable function in all versions up to, and including, 5.2.6. This makes it possible for authenticated attackers, with...
CVE-2026-2306
The Ninja Tables – Easy Data Table Builder plugin for WordPress is vulnerable to unauthorized database table creation due to missing authorization checks on the createFluentCartTable function in all versions up to, and including, 5.2.6. This makes it possible for authenticated attackers, with...
CVE-2026-5753
The CVE CVE-2026-5753 concerns the All-in-One WP Migration Unlimited Extension for WordPress (versions ≤ 2.83). The root cause is Missing Authorization in Ai1wmve_Schedules_Controller::save for admin_post_ai1wm_schedule_event_save, which does not verify user capabilities before saving schedule da...
GHSA-7WW3-XVF5-CXWM
creationtimestamp| type| source ---|---|--- 2026-05-06 03:10:29+00:00| seen| https://gist.github.com/alon710/1d05503905d86d5b6619223d3f318c59...
CVE-2025-71252
creationtimestamp| type| source ---|---|--- 2026-05-06 02:54:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml5p5pkzx226 2026-05-06 05:28:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5xronng72o 2026-06-01 18:00:00+00:00| seen|...
CVE-2025-71255
creationtimestamp| type| source ---|---|--- 2026-05-06 02:54:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml5p5c2ntm2w 2026-05-06 05:54:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5zaf5wiv2i 2026-06-01 18:00:00+00:00| seen|...
SUSE CVE-2026-43013
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: lag: Check for LAG device before creating debugfs mlx5lagdevaddmdev may return 0 success even when an error occurs that is handled gracefully. Consequently, the initialization flow proceeds to call mlx5ldevadddebugfs ev...
PT-2026-38294
Name of the Vulnerable Software and Affected Versions GitPython versions prior to 3.1.48 Description Insufficient validation of reference paths in reference creation, rename, and delete operations allows attackers to write, overwrite, move, or delete files outside the repository's .git directory...
PT-2026-38229
Name of the Vulnerable Software and Affected Versions Masa CMS versions prior to 7.2.10 Masa CMS versions prior to 7.3.15 Masa CMS versions prior to 7.4.10 Masa CMS versions prior to 7.5.3 Description The createBundle function in csettings.cfc fails to properly validate anti-CSRF Cross-Site Reque...
RHCOS 4 : OpenShift Container Platform 4.7.38 (RHSA-2021:4801)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4801 advisory. - jenkins: FilePathmkdirs does not check permission to create parent directories CVE-2021-21685 - jenkins: File path filters do not...
WordPress plugin Ninja Tables – Easy Data Table Builder 安全漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
CVE-2026-4061
creationtimestamp| type| source ---|---|--- 2026-05-05 23:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3ml5dw2bfnu2a...
Grav has Unauthenticated Path Traversal & Arbitrary File Write in its FormFlash component
Vulnerability Report: Grav CMS Unauthenticated Path Traversal & Arbitrary File Write ZERO-DAY Unauthenticated Path Traversal leading to Arbitrary Directory Creation and Configuration Injection Summary Grav CMS v1.7.49.5 and latest development source is vulnerable to a Zero-Day Path Traversal...
Improper Enforcement of a Single, Unique Action
Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Improper Enforcement of a Single, Unique Action through the user creation process. An attacker can remove administrative privileges and disrup...
CVE-2026-33975
creationtimestamp| type| source ---|---|--- 2026-05-05 20:46:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml52mdhzw52p...
CVE-2026-34464
creationtimestamp| type| source ---|---|--- 2026-05-05 20:42:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml52evk4bo2e 2026-05-06 05:36:40+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-sandboxie-per-windows...