WP Hotel Booking <= 2.3.2 - Cross-Site Scripting

The WP Hotel Booking plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'checkindate' parameter in all versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...

Security update for perl-Date-Manip

This update for perl-Date-Manip fixes the following issues: CVE-2026-60074: corrupted dates returned when processing non-ASCII decimal digits that pass the numeric range tests in check bsc1273063. CVE-2026-60075: CPU exhaustion due to quadratic backtracking in the unanchored time substitution in...

CVE-2026-60074

A flaw was found in Date::Manip. This vulnerability allows an attacker to provide specially crafted input containing non-ASCII decimal digits to the Date::Manip library for Perl. The library's parsing logic incorrectly processes these digits, truncating the input and resulting in an inaccurate da...

CVE-2026-19383

creationtimestamp| type| source ---|---|--- 2026-08-10 02:37:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2fofomjudpidj...

CVE-2026-65517

creationtimestamp| type| source ---|---|--- 2026-08-10 00:16:18+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msot3onbxd2w 2026-08-10 20:16:11+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msqw5ba4yb2o...

CVE-2022-2200

creationtimestamp| type| source ---|---|--- 2026-08-09 04:23:36+00:00| seen| https://t.me/onelab1337/2324 2026-08-10 00:00:29+00:00| published-proof-of-concept| https://t.me/onelab1337/2324...

CVE-2026-71984

creationtimestamp| type| source ---|---|--- 2026-08-09 00:12:16+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msmcbpazap2o...

CVE-2026-15252

creationtimestamp| type| source ---|---|--- 2026-08-08 08:16:11+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mskmxwsoxh22 2026-08-09 04:18:18+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msmpzpez4w2i...

CVE-2026-19268

Summary of CVE-2026-19268 (abdullah1854 MCPGateway) : The vulnerability affects the MCPGateway project up to commit 549f494a9e363f40530149de324b8097de424230, specifically the Claude Usage Range Endpoint. The issue is in the function getUsageByDateRange within src/services/claude-usage.ts, where a...

EUVD-2026-54768

A vulnerability was identified in abdullah1854 MCPGateway up to 549f494a9e363f40530149de324b8097de424230. This impacts the function getUsageByDateRange of the file src/services/claude-usage.ts of the component Claude Usage Range Endpoint. The manipulation of the argument since leads to command...

CVE-2026-16267

The Newsletters WordPress plugin, prior to version 4.16, does not restrict the classes allowed during unserialisation of a value submitted via a public form. This allows unauthenticated attackers to inject arbitrary PHP objects. Affected: Newsletters plugin

Lotus Domino R5 and R6 WebMail - Information Disclosure

Lotus Domino R5 and R6 WebMail with 'Generate HTML for all fields' enabled which is by default allows remote attackers to read the HTML source to obtain sensitive information including the password hash in the HTTPPassword field, the password change date in the HTTPPasswordChangeDate field, and t...

CVE-2026-20339

creationtimestamp| type| source ---|---|--- 2026-08-07 17:50:55+00:00| seen| https://infosec.exchange/users/AAKL/statuses/117055491493877536 2026-08-08 11:02:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mskw66h3xi2h 2026-08-08 18:09:47+00:00| seen|...

CVE-2022-4995

Weaver Fanwei E-cology 9.0 versions prior to 10.52 contain a file upload vulnerability that allows a remote, unauthenticated attacker to upload arbitrary files, including JSP webshells, by submitting a multipart/form-data POST request to /workrelate/plan/util/uploaderOperate.jsp with arbitrary...

CVE-2026-38053

creationtimestamp| type| source ---|---|--- 2026-08-07 10:12:54+00:00| published-proof-of-concept| Telegram/cr6l50opWOBaeLyWntUIu5BxD85N7mmykPrPwEONJj0b8 2026-08-08 00:17:13+00:00| published-proof-of-concept| Telegram/cr6l50opWOBaeLyWntUIu5BxD85N7mmykPrPwEONJj0b8...

CVE-2026-19189

creationtimestamp| type| source ---|---|--- 2026-08-07 04:31:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gi32l2zwypa4l 2026-08-07 12:14:11+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117054167416606582...

CVE-2026-62830

creationtimestamp| type| source ---|---|--- 2026-08-07 02:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mshhjldhws2z 2026-08-08 03:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msk5ewdujy23...

CVE-2026-64638

creationtimestamp| type| source ---|---|--- 2026-08-07 01:53:30+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mshh4queez2r 2026-08-07 13:11:54+00:00| seen| https://infosec.exchange/users/tomcat/statuses/117054394427524887 2026-08-07 14:00:04+00:00|...

GHSA-957R-QF9P-67XW

creationtimestamp| type| source ---|---|--- 2026-08-06 22:32:31+00:00| seen| https://gist.github.com/alon710/40498cd7ab099bfd269056fcd2fad5d7 2026-08-07 00:05:24+00:00| seen| https://gist.github.com/alon710/40498cd7ab099bfd269056fcd2fad5d7...

CVE-2026-54489

creationtimestamp| type| source ---|---|--- 2026-08-06 16:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgg6rq76m2u 2026-08-08 10:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mskt6cv4as2o...