[SECURITY] Fedora 43 Update: insight-18.0.50.20260306-3.fc43

Insight is a tight graphical user interface to GDB written in Tcl/Tk. It provides a comprehensive interface that enables users to harness most of GDB's power. It's also probably the only up-to-date UI for the latest GDB version...

CVE-2026-0703

Affected software: NextMove Lite – Thank You Page for WooCommerce plugin for WordPress. Vulnerability: Stored Cross-Site Scripting via the plugin’s** 'xlwcty_current_date' shortcode. Root cause: insufficient input sanitization and output escaping on user-supplied attributes. Versions impacted: al...

CVE-2026-0703

The NextMove Lite – Thank You Page for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'xlwctycurrentdate' shortcode in all versions up to, and including, 2.23.0 due to insufficient input sanitization and output escaping on user supplied attributes...

PT-2026-36616

The NextMove Lite – Thank You Page for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'xlwcty current date' shortcode in all versions up to, and including, 2.23.0 due to insufficient input sanitization and output escaping on user supplied attributes...

CVE-2026-44001

creationtimestamp| type| source ---|---|--- 2026-05-01 20:43:31+00:00| published-proof-of-concept| https://github.com/patriksimek/vm2/security/advisories/GHSA-hw58-p9xv-2mjh 2026-05-13 21:45:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlrbn3ni6e2c 2026-05-14 18:37:07+00:00|...

CVE-2026-44542

creationtimestamp| type| source ---|---|--- 2026-05-01 19:08:36+00:00| published-proof-of-concept| https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-fwj3-42wh-8673 2026-05-14 18:00:13+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mltfj43q4y2l 2026-05-14...

CVE-2026-33900

creationtimestamp| type| source ---|---|--- 2026-05-01 15:50:35+00:00| seen| https://vulnerability.circl.lu/bundle/63ae1405-3878-4622-935b-6ee96a75dc90...

CVE-2026-43001

creationtimestamp| type| source ---|---|--- 2026-05-01 10:56:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkrxrsdamf2i 2026-05-28 21:13:02+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmwwsrnh6g2z...

WordPress WP Meta and Date Remover plugin <= 2.3.4 - Unauthenticated Reflected Cross-Site Scripting vulnerability

Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin WP Meta and Date Remover versions = 2.3.4...

CVE-2026-7545

creationtimestamp| type| source ---|---|--- 2026-05-01 03:05:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkr5hqbsoj2i...

CVE-2026-7510

creationtimestamp| type| source ---|---|--- 2026-05-01 02:39:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkr3yupog42k...

CVE-2026-28909

creationtimestamp| type| source ---|---|--- 2026-05-01 02:34:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkr3pcupys2h...

CVE-2026-7512

creationtimestamp| type| source ---|---|--- 2026-05-01 00:31:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqutdweyk2z 2026-05-01 03:30:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkr6ukbhcj2q...

CVE-2026-7501

creationtimestamp| type| source ---|---|--- 2026-04-30 23:21:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkqqxhilz62p...

CVE-2026-40951

creationtimestamp| type| source ---|---|--- 2026-04-30 22:01:10+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mkqmh3munf2n 2026-04-30 22:48:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkqp47tkxm2i...

CVE-2026-32148

creationtimestamp| type| source ---|---|--- 2026-04-30 21:38:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkql6iymc32i 2026-10-05 13:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mx52oeuycp24...

CVE-2026-42597

creationtimestamp| type| source ---|---|--- 2026-04-30 19:11:57+00:00| published-proof-of-concept| https://github.com/gotenberg/gotenberg/security/advisories/GHSA-g924-cjx7-2rjw 2026-05-14 17:44:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mltemomcod2q...

CVE-2026-42596

creationtimestamp| type| source ---|---|--- 2026-04-30 19:11:14+00:00| published-proof-of-concept| https://github.com/gotenberg/gotenberg/security/advisories/GHSA-4vmc-gm8v-m35h 2026-05-14 17:14:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mltcxjauzm2i 2026-05-17 18:01:12+00:0...

CVE-2026-42589

creationtimestamp| type| source ---|---|--- 2026-04-30 18:30:59+00:00| published-proof-of-concept| https://github.com/gotenberg/gotenberg/security/advisories/GHSA-rqgh-gxv4-6657 2026-05-30 07:00:03+00:00| seen| https://t.me/GithubRedTeam/86500 2026-05-30 07:38:57+00:00| confirmed|...

RUSTSEC-2026-0138 Unsound access to padding bytes while serializing date/time values using the Mysql backend

Diesel-async uses the mysql-async crate for interacting with Mysql compatible databases. This library already provides access to deserialized data for date/time releated types. Diesel-async then translated these deserialized data back to their serialized binary representation to hook into diesels...