CVE-2026-86494

creationtimestamp| type| source ---|---|--- 2026-09-07 18:01:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mux3ob5m3e2v 2026-09-07 18:56:55+00:00| seen| https://bsky.app/profile/cybercod.bsky.social/post/3mux6rbojem2p...

CVE-2026-0257

Forge a GlobalProtect auth override cookie using the public key from TLS CVE-2026-0257 A proof-of-concept script to test a target PAN-OS GlobalProtect portal or gateway for CVE-2026-0257. The script will attempt to forge a valid authentication override cookie by iterating over the certificate cha...

CVE-2026-86499

In JetBrains YouTrack before 2026.1.14047 predefined search fields leaked all group names to any user, regardless of visibility permission...

CVE-2026-80118

creationtimestamp| type| source ---|---|--- 2026-09-07 16:00:03+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3muwuuzjhii2f 2026-09-07 16:00:06+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117230587260325096...

CVE-2026-7861

creationtimestamp| type| source ---|---|--- 2026-09-07 14:30:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/117230234732474418 2026-09-07 14:30:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3muwpurh75s2b 2026-09-07 15:20:37+00:00| seen|...

CVE-2026-86426

creationtimestamp| type| source ---|---|--- 2026-09-07 14:07:46+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muwombeul522 2026-09-08 18:08:31+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3muzmjo32o42g 2026-09-09 15:00:07+00:00| confirmed|...

CVE-2026-80238

creationtimestamp| type| source ---|---|--- 2026-09-07 14:07:38+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muwolzez762w 2026-09-08 10:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muysvvlfta2w 2026-09-12 06:07:07+00:00| seen|...

GHSA-QQJF-53CJ-PWVV

creationtimestamp| type| source ---|---|--- 2026-09-07 14:02:55+00:00| seen| https://bsky.app/profile/whatsnew.fyi/post/3muwodkwr3p24 2026-09-10 23:20:16+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mv76uxdg5z2t...

CVE-2026-42533-Config-Scanner

nginx capture-clobber scanner A read-only static scanner that flags nginx configurations vulnerable to the complexvalue two-pass capture-clobbering bug class F5/nginx SIRT advisory, July 2026. It parses your config and reports the vulnerable pattern with the reason and location. It does not explo...

CVE-2026-6431

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Biographical Info' meta field parameter in all versions up to, and including, 3.15.7 due to insufficient input sanitization and...

CVE-2026-84968

creationtimestamp| type| source ---|---|--- 2026-09-07 13:15:26+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muwlooa74k2r...

CVE-2016-9042

creationtimestamp| type| source ---|---|--- 2026-09-07 13:15:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muwlohukka2v...

CVE-2017-6452

creationtimestamp| type| source ---|---|--- 2026-09-07 13:15:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muwlohukka2v...

CVE-2017-6462

creationtimestamp| type| source ---|---|--- 2026-09-07 13:15:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muwlohukka2v...

CVE-2026-6431 User Profile Builder <= 3.15.7 - Unauthenticated Stored Cross-Site Scripting via 'Biographical Info' Meta Field

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Biographical Info' meta field parameter in all versions up to, and including, 3.15.7 due to insufficient input sanitization and...

EUVD-2026-72367

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Biographical Info' meta field parameter in all versions up to, and including, 3.15.7 due to insufficient input sanitization and...

CVE-2026-6431

CVE-2026-6431 affects the User Profile Builder WordPress plugin (all versions up to and including 3.15.7 ), which is vulnerable to unauthenticated stored Cross-Site Scripting (XSS) through the 'Biographical Info' meta field parameter. The root cause is insufficient input sanitization and output e...

CVE-2006-2451

creationtimestamp| type| source ---|---|--- 2026-09-07 12:00:03+00:00| seen| Telegram/m8SWfVeZlticuBT317GgsGZAEtL8zbxvMheXkcIiGwkXhdo 2026-09-08 00:00:45+00:00| published-proof-of-concept| Telegram/m8SWfVeZlticuBT317GgsGZAEtL8zbxvMheXkcIiGwkXhdo 2026-09-09 05:00:06+00:00| seen|...

CVE-2026-78221

A flaw was found in OpenVPN. An incorrect buffer size calculation within the Windows Interactive Service allows local authenticated users to trigger memory corruption or disclose sensitive information. This vulnerability can be exploited by providing specially crafted inputs...

SSH-Terrapin-Prefix-Truncation-Weakness-CVE-2023-48795-Checker

terrapincheck.py A lightweight Python scanner for CVE-2023-48795 — the SSH Terrapin Prefix Truncation vulnerability. Terrapin is a protocol-level vulnerability in SSH that allows an attacker performing an active MitM to truncate the negotiated extension information, downgrading connection securit...