GHSA-WM8W-6QJM-CV43

creationtimestamp| type| source ---|---|--- 2026-08-06 04:31:21+00:00| seen| https://gist.github.com/alon710/a33e8f1d3990c5613ef07342bcfbda1b...

CVE-2026-11421

creationtimestamp| type| source ---|---|--- 2026-08-05 23:15:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msensp64kw26...

CVE-2026-17617

creationtimestamp| type| source ---|---|--- 2026-08-05 19:53:09+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msecjiasie22 2026-08-11 04:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msrs4xvgke2t...

CVE-2026-70447

creationtimestamp| type| source ---|---|--- 2026-08-05 18:28:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dwirplyq3m6dz...

CVE-2026-71192

creationtimestamp| type| source ---|---|--- 2026-08-05 17:38:10+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/7mq5ik4363ci5...

GHSA-V93F-FGJR-HJRJ

creationtimestamp| type| source ---|---|--- 2026-08-05 17:33:01+00:00| seen| https://gist.github.com/alon710/9a7a5a858022e3c656feab4ec8f0d30d...

CVE-2026-53992

ProjectSend r2029 contains a reflected cross-site scripting vulnerability in thumbnails-regenerate.php that allows remote attackers to inject arbitrary HTML and JavaScript by supplying unsanitized values in the startdate and enddate GET parameters, which are echoed unescaped into HTML attribute...

CVE-2026-50749

creationtimestamp| type| source ---|---|--- 2026-08-05 15:43:11+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/hhbopx5ltrfbd...

CVE-2026-48834

creationtimestamp| type| source ---|---|--- 2026-08-05 15:13:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/fcpo4l6tlfssz...

CVE-2026-14869

creationtimestamp| type| source ---|---|--- 2026-08-05 15:00:06+00:00| seen| https://t.me/thehackernews/9717 2026-08-06 00:00:33+00:00| seen| https://t.me/thehackernews/9717 2026-08-29 20:00:06+00:00| seen| https://t.me/CyberDispatch/2484 2026-08-30 00:00:37+00:00| seen|...

CVE-2026-53992

ProjectSend r2029 contains a reflected cross-site scripting vulnerability in thumbnails-regenerate.php that allows remote attackers to inject arbitrary HTML and JavaScript by supplying unsanitized values in the startdate and enddate GET parameters, which are echoed unescaped into HTML attribute...

CVE-2026-53992

A reflected XSS in ProjectSend r2029 affects thumbnails-regenerate.php through unsanitized start_date and end_date GET parameters, which are echoed into HTML attributes. An attacker can craft a URL that, when opened by an authenticated user with edit_settings permissions, executes arbitrary HTML/...

CVE-2026-53992 Reflected XSS in ProjectSend thumbnails-regenerate.php via start_date / end_date Parameters

ProjectSend r2029 contains a reflected cross-site scripting vulnerability in thumbnails-regenerate.php that allows remote attackers to inject arbitrary HTML and JavaScript by supplying unsanitized values in the startdate and enddate GET parameters, which are echoed unescaped into HTML attribute...

CVE-2026-53992 Reflected XSS in ProjectSend thumbnails-regenerate.php via start_date / end_date Parameters

ProjectSend r2029 contains a reflected cross-site scripting vulnerability in thumbnails-regenerate.php that allows remote attackers to inject arbitrary HTML and JavaScript by supplying unsanitized values in the startdate and enddate GET parameters, which are echoed unescaped into HTML attribute...

CVE-2026-53992 Reflected XSS in ProjectSend thumbnails-regenerate.php via start_date / end_date Parameters

ProjectSend r2029 contains a reflected cross-site scripting vulnerability in thumbnails-regenerate.php that allows remote attackers to inject arbitrary HTML and JavaScript by supplying unsanitized values in the startdate and enddate GET parameters, which are echoed unescaped into HTML attribute...

EUVD-2026-53394

ProjectSend r2029 contains a reflected cross-site scripting vulnerability in thumbnails-regenerate.php that allows remote attackers to inject arbitrary HTML and JavaScript by supplying unsanitized values in the startdate and enddate GET parameters, which are echoed unescaped into HTML attribute...

CVE-2026-61486

creationtimestamp| type| source ---|---|--- 2026-08-05 14:50:07+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/eyof55exdtdoe...

WordPress Order Delivery Date for WooCommerce plugin <= 4.6.0 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Order Delivery Date for WooCommerce versions = 4.6.0...

CVE-2026-71287

creationtimestamp| type| source ---|---|--- 2026-08-05 13:55:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dpeo2ycooev7n...

CVE-2026-71289

creationtimestamp| type| source ---|---|--- 2026-08-05 13:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/117043142705707824 2026-08-05 13:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msdn56d7is2i 2026-08-05 15:02:18+00:00| seen|...