CVE-2026-14231

creationtimestamp| type| source ---|---|--- 2026-08-08 06:18:14+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mskgbcinlw2o 2026-08-09 02:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msmjd25xw52y...

CVE-2026-16535

The Link Library WordPress plugin version before 7.9.4 is vulnerable to a Reflected Cross-Site Scripting (XSS) attack. The root cause is the failure to properly sanitise and escape a parameter before reflecting it back in an HTTP response. This allows unauthenticated attackers to target users who...

EUVD-2026-54732

The Link Library WordPress plugin before 7.9.4 does not sanitise and escape a parameter before reflecting it back in a response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against users who can be tricked into performing an action...

CVE-2026-16535 Link Library < 7.9.4 - Reflected XSS via Thumbs-Rating likelabel

The Link Library WordPress plugin before 7.9.4 does not sanitise and escape a parameter before reflecting it back in a response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against users who can be tricked into performing an action...

CVE-2026-16535 Link Library < 7.9.4 - Reflected XSS via Thumbs-Rating likelabel

The Link Library WordPress plugin before 7.9.4 does not sanitise and escape a parameter before reflecting it back in a response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against users who can be tricked into performing an action...

CVE-2026-16535

The Link Library WordPress plugin before 7.9.4 does not sanitise and escape a parameter before reflecting it back in a response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against users who can be tricked into performing an action...

GHSA-C9W5-RWH3-7PM9

creationtimestamp| type| source ---|---|--- 2026-08-08 05:33:09+00:00| seen| https://gist.github.com/alon710/888e29b3ee03ee26d9a2341be25e1c36...

GHSA-F88M-G3JW-G9CJ

creationtimestamp| type| source ---|---|--- 2026-08-08 04:17:23+00:00| seen| https://gist.github.com/farrelalvis/1030dc3a5520ef382113c429daf63288 2026-09-06 11:40:11+00:00| seen| https://bsky.app/profile/kakkokari-gtyih.misskey.io.ap.brid.gy/post/3mutvv2wexkm2...

GHSA-94G3-G5V7-Q4JG

creationtimestamp| type| source ---|---|--- 2026-08-08 03:53:49+00:00| seen| https://bsky.app/profile/mel-echosphere.bsky.social/post/3msk6crnt3x2y...

CVE-2026-32935

creationtimestamp| type| source ---|---|--- 2026-08-08 03:53:48+00:00| seen| https://bsky.app/profile/mel-echosphere.bsky.social/post/3msk6crnt3x2y...

GHSA-GM37-52C6-37MW

creationtimestamp| type| source ---|---|--- 2026-08-08 02:32:35+00:00| seen| https://gist.github.com/alon710/6f3e0768fc0386f4c965af62333fef78...

GHSA-9HJ4-R449-HFVC

creationtimestamp| type| source ---|---|--- 2026-08-08 01:33:52+00:00| seen| https://gist.github.com/alon710/ad9de868f19ed1752a611a888e617195...

PT-2026-69218

Name of the Vulnerable Software and Affected Versions D-Link DWR-M961 hardware version C1 versions prior to 1.1.5 C1 202607071108 Description A command injection issue exists in the '/boafrm/formPinManageSetup' endpoint. A remote attacker can inject arbitrary malicious commands through the oldPIn...

PT-2026-69214

Name of the Vulnerable Software and Affected Versions D-Link DWR-M961 hardware version C1 versions prior to 1.1.5 C1 202607071108 Description A command injection issue exists in the '/boafrm/formDebugDiagnosticRun' endpoint. A remote attacker can inject arbitrary malicious commands through the ho...

PT-2026-69171

Name of the Vulnerable Software and Affected Versions Link Library versions prior to 7.9.4 Description An issue exists where the software fails to sanitize and escape a parameter before reflecting it in a response. This allows unauthenticated attackers to execute Reflected Cross-Site Scripting XS...

PT-2026-69224

Name of the Vulnerable Software and Affected Versions D-Link DWR-M961 hardware version C1 software version 1.1.2 C1 202602110044 Description A buffer overflow occurs in the 'quicksetup.cgi' interface. A remote attacker can execute arbitrary commands or cause a device crash by sending overly long...

PT-2026-69223

Name of the Vulnerable Software and Affected Versions D-Link DWR-M961 hardware version C1 software version 1.1.2 C1 202602110044 Description A buffer overflow occurs in the 'app.cgi' interface. A remote attacker can send an excessively long string to the netAcc.addlist.name field to execute...

PT-2026-69211

Name of the Vulnerable Software and Affected Versions D-Link DWR-M961 hardware version C1 versions prior to 1.1.5 C1 202607071108 Description A command injection issue exists in the '/boafrm/formLtefotaUpgradeFibocom' endpoint. A remote attacker can inject arbitrary malicious commands through the...

PT-2026-69215

Name of the Vulnerable Software and Affected Versions D-Link DWR-M961 hardware version C1 versions prior to 1.1.5 C1 202607071108 Description A command injection issue exists in the '/boafrm/formUSSDSetup' endpoint. A remote attacker can inject arbitrary malicious commands through the ussdValue a...

PT-2026-69221

Name of the Vulnerable Software and Affected Versions D-Link DWR-M961 versions prior to 1.1.5 C1 202607071108 Description A command injection issue exists in the '/boafrm/formWsc' endpoint. A remote attacker can execute arbitrary malicious commands with root privileges by injecting them into the...