27837 matches found
CVE-2026-19189
creationtimestamp| type| source ---|---|--- 2026-08-07 04:31:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gi32l2zwypa4l 2026-08-07 12:14:11+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117054167416606582...
CVE-2026-62830
creationtimestamp| type| source ---|---|--- 2026-08-07 02:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mshhjldhws2z 2026-08-08 03:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msk5ewdujy23 2026-08-11 19:00:41+00:00| seen|...
CVE-2026-64638
creationtimestamp| type| source ---|---|--- 2026-08-07 01:53:30+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mshh4queez2r 2026-08-07 13:11:54+00:00| seen| https://infosec.exchange/users/tomcat/statuses/117054394427524887 2026-08-07 14:00:04+00:00|...
Fedora 43 : php (2026-d755ca77c4)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d755ca77c4 advisory. PHP version 8.4.24 30 Jul 2026 BCMath: Fixed GHSA-x692-q9x7-8c3f Out-of-bounds write in bccomp. CVE-2026-17544 Recep Asan Calendar: Fixed bug GH-226...
SUSE CVE-2026-69240
Sequelize is a Node.js ORM tool. Prior to 6.37.4, SQL injection is possible with strings only if dialect is set to oracle. The escape function defined in sql-string.js does not escape quotes if the value starts with TOTIMESTAMP or TODATE. In the Oracle dialect, when val is a string and starts wit...
GHSA-957R-QF9P-67XW
creationtimestamp| type| source ---|---|--- 2026-08-06 22:32:31+00:00| seen| https://gist.github.com/alon710/40498cd7ab099bfd269056fcd2fad5d7 2026-08-07 00:05:24+00:00| seen| https://gist.github.com/alon710/40498cd7ab099bfd269056fcd2fad5d7...
CVE-2026-66708
creationtimestamp| type| source ---|---|--- 2026-08-06 21:01:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgwruxti62t...
CVE-2026-15235
creationtimestamp| type| source ---|---|--- 2026-08-06 19:15:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msgqufchaa2n...
GHSA-CXJQ-MRR5-89RV
creationtimestamp| type| source ---|---|--- 2026-08-06 18:31:30+00:00| seen| https://gist.github.com/alon710/1c8a7f596af5fdd35dfa04b0effb7a0b...
CVE-2026-65578
creationtimestamp| type| source ---|---|--- 2026-08-06 16:14:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msggqohynx22...
CVE-2026-54489
creationtimestamp| type| source ---|---|--- 2026-08-06 16:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgg6rq76m2u 2026-08-08 10:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mskt6cv4as2o...
CVE-2026-65559
Shop manager Privilege Escalation in Order Delivery Date for WooCommerce = 4.6.0 versions...
CVE-2026-65559 WordPress Order Delivery Date for WooCommerce plugin <= 4.6.0 - Privilege Escalation vulnerability
Shop manager Privilege Escalation in Order Delivery Date for WooCommerce = 4.6.0 versions...
EUVD-2026-53984
Shop manager Privilege Escalation in Order Delivery Date for WooCommerce = 4.6.0 versions...
CVE-2026-65559
The CVE relates to a privilege-escalation issue in the WordPress plugin Order Delivery Date for WooCommerce, affecting versions up to 4.6.0. The vulnerability targets the shop manager role within the plugin’s delivery date functionality. The provided data constrain the impact to a privilege escal...
CVE-2026-67873
creationtimestamp| type| source ---|---|--- 2026-08-06 13:32:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msg5ozhrsh2l 2026-08-07 23:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msjovqihua2o 2026-08-08 00:48:57+00:00| seen|...
CVE-2026-5134
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Loca Software Informatics Technology Ltd. Co. CMS allows SQL Injection. This issue affects CMS: through 06082026. NOTE: The vendor was contacted early about this disclosure but did not respond in a...
CVE-2026-5134 SQLi in Loca Software's CMS
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Loca Software Informatics Technology Ltd. Co. CMS allows SQL Injection. This issue affects CMS: through 06082026. NOTE: The vendor was contacted early about this disclosure but did not respond in a...
CVE-2026-61545
creationtimestamp| type| source ---|---|--- 2026-08-06 13:10:21+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4i4smu425...
CVE-2026-16102
creationtimestamp| type| source ---|---|--- 2026-08-06 13:10:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4hotxsw2a 2026-08-12 04:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msuclvghtf22 2026-08-12 04:37:08+00:00| seen|...