CVE-2026-4653

The Block, Suspend, Report for BuddyPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' parameter in versions up to and including 3.6.4. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with...

CVE-2026-15137

creationtimestamp| type| source ---|---|--- 2026-07-09 03:52:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq6qa72g7o2k...

CVE-2026-51540

creationtimestamp| type| source ---|---|--- 2026-07-09 03:43:26+00:00| seen| https://gist.github.com/MrAlaskan/5e0c2af7f4a1d188814c7fa8f812c8da 2026-07-14 17:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmqbggzbk24...

CVE-2026-51539

creationtimestamp| type| source ---|---|--- 2026-07-09 03:42:07+00:00| seen| https://gist.github.com/MrAlaskan/f22dcf01a5dd90da1b191fcee9043a32...

CVE-2026-51538

creationtimestamp| type| source ---|---|--- 2026-07-09 03:40:11+00:00| seen| https://gist.github.com/MrAlaskan/8156ca3acd6754a9f66efede0a1351f2 2026-07-14 14:48:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmh7ocfu62v...

CVE-2026-51537

creationtimestamp| type| source ---|---|--- 2026-07-09 03:36:14+00:00| seen| https://gist.github.com/MrAlaskan/a5fb0fb7765c9df80d28220ed558f04e 2026-07-14 14:46:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmh467mk22t...

CVE-2026-51536

creationtimestamp| type| source ---|---|--- 2026-07-09 03:32:56+00:00| seen| https://gist.github.com/MrAlaskan/e160c626a32e03e5d9eddaa732560672 2026-07-14 14:46:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmh44rhv52r...

GHSA-2R7G-8HPC-RPQ9

creationtimestamp| type| source ---|---|--- 2026-07-09 03:00:07+00:00| seen| https://t.me/brutsecurity/2046 2026-07-10 00:00:31+00:00| seen| https://t.me/brutsecurity/2046 2026-07-11 12:00:03+00:00| published-proof-of-concept| https://t.me/brutsecurity/2046 2026-07-12 00:00:50+00:00|...

GHSA-QCJ2-99CG-MPPF

creationtimestamp| type| source ---|---|--- 2026-07-09 03:00:06+00:00| seen| https://t.me/brutsecurity/2141 2026-07-10 00:00:14+00:00| seen| https://t.me/brutsecurity/2141 2026-07-11 12:00:04+00:00| published-proof-of-concept| https://t.me/brutsecurity/2141 2026-07-12 00:00:50+00:00|...

CVE-2026-15135

creationtimestamp| type| source ---|---|--- 2026-07-09 02:09:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq6kj7txko27...

CVE-2026-54783

creationtimestamp| type| source ---|---|--- 2026-07-09 02:04:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq6kabger32x...

CVE-2026-54780

creationtimestamp| type| source ---|---|--- 2026-07-09 01:44:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq6j4hinzz2z...

CVE-2026-54774

creationtimestamp| type| source ---|---|--- 2026-07-09 01:36:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq6io2uglh2x...

CVE-2026-15132

creationtimestamp| type| source ---|---|--- 2026-07-09 01:18:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq6hnnyctx27 2026-07-09 04:46:06+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260709...

CVE-2017-10680

creationtimestamp| type| source ---|---|--- 2026-07-09 01:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq6gz3iouu25...

PT-2026-57001

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2026.6.0 Discourse versions prior to 2026.5.1 Discourse versions prior to 2026.4.2 Discourse versions prior to 2026.1.5 Description A topic featured link is not sufficiently normalized and escaped before being...

PT-2026-56920

Name of the Vulnerable Software and Affected Versions D-link DIR-823G version 1.0.2B05 20181207 Description A weakness exists in the Web Interface component within the /etc/boa/boa.conf file. A remote attacker can perform a manipulation that leads to a least privilege violation. This attack is...

PT-2026-56933

Name of the Vulnerable Software and Affected Versions Pimcore versions prior to 2025.4.6 Pimcore versions prior to 2026.1.6 Description An unauthenticated attacker who knows a valid admin username can take over an admin account by sending a password reset request containing an attacker-controlled...

CVE-2026-39243

decompress before 4.2.2 allows arbitrary hardlink creation during archive extraction, enabling file read disclosure and file corruption. When processing hardlink entries type === 'link', the x.linkname field from the archive is passed directly to fs.link without validation index.js line 113. An...

The vulnerability in the script/cgi-bin/app_mgr.cgi of the D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04, allows a hacker to execute arbitrary commands.

The vulnerability in the /cgi-bin/appmgr.cgi microprogramming software of D-Link devices such as DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and...