CVE-2026-57326

creationtimestamp| type| source ---|---|--- 2026-06-29 16:13:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpguyfwk362w...

CVE-2026-57328

creationtimestamp| type| source ---|---|--- 2026-06-29 16:11:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpguuxldxi2t...

CVE-2026-57320

creationtimestamp| type| source ---|---|--- 2026-06-29 16:11:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpguudtjgp23...

CVE-2026-49860

creationtimestamp| type| source ---|---|--- 2026-06-29 16:07:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpguopfyi62y...

CVE-2026-40522

creationtimestamp| type| source ---|---|--- 2026-06-29 16:07:04+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpgun5j5r22u...

CVE-2026-9105

An authenticated stack-based buffer overflow vulnerability exists in the web management interface of TP-Link TL-WR841N v14. A remote authenticated attacker can send crafted HTTP requests to cause the embedded web server to overflow a stack buffer, resulting in a crash of the affected process...

CVE-2026-9105

CVE-2026-9105 affects the web management interface of the TP-Link TL-WR841N (v14). An authenticated attacker can trigger a stack-based buffer overflow in the embedded web server by sending crafted HTTP requests, leading to a crash and a denial-of-service condition with automatic reboot. The vulne...

EUVD-2026-40136

An authenticated stack-based buffer overflow vulnerability exists in the web management interface of TP-Link TL-WR841N v14. A remote authenticated attacker can send crafted HTTP requests to cause the embedded web server to overflow a stack buffer, resulting in a crash of the affected process...

CVE-2026-49049

creationtimestamp| type| source ---|---|--- 2026-06-29 16:04:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpgui7cu3k2o 2026-07-03 17:15:04+00:00| seen| https://dnsc.ro/citeste/alerta-vulnerabilitate-exploatata-activ-in-joomla-helix3 2026-07-04 07:04:36+00:00| seen|...

CVE-2026-57333

Unauthenticated Cross Site Scripting XSS in Link Whisper Free = 0.9.4 versions...

CVE-2026-40524

creationtimestamp| type| source ---|---|--- 2026-06-29 15:16:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpgrs3atsj2j 2026-06-29 15:55:51+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpgtz42vwk25 2026-06-29 15:55:52+00:00| seen|...

CVE-2026-36907

creationtimestamp| type| source ---|---|--- 2026-06-29 14:48:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgq7xwoyx2o 2026-06-29 21:48:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphhqiwwz62t...

CVE-2026-36908

creationtimestamp| type| source ---|---|--- 2026-06-29 14:41:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgpu2rr3h2e 2026-06-29 21:49:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphhr4l2n22k...

CVE-2026-54370

acl before version 2.4.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link between an lstat check and subsequent symlink-following operations such as stat, chown,...

CVE-2026-54370

acl before version 2.4.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link between an lstat check and subsequent symlink-following operations such as stat, chown,...

CVE-2026-49983

creationtimestamp| type| source ---|---|--- 2026-06-29 13:58:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgnghpgio2n...

CVE-2026-57333 WordPress Link Whisper Free plugin <= 0.9.4 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Link Whisper Free = 0.9.4 versions...

EUVD-2026-40104

Unauthenticated Cross Site Scripting XSS in Link Whisper Free = 0.9.4 versions...

CVE-2026-57333

Unauthenticated Cross Site Scripting XSS in Link Whisper Free = 0.9.4 versions...

CVE-2026-57333

CVE-2026-57333 describes an unauthenticated reflected Cross Site Scripting (XSS) vulnerability in the WordPress plugin Link Whisper Free , affecting versions up to and including 0.9.4 . The connected sources consistently identify it as a reflected XSS issue in the Free plugin; no root-cause detai...