75347 matches found
WordPress Link Library plugin < 7.9.4 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by Joshua Martinelle in WordPress Plugin Link Library versions 7.9.4...
CVE-2026-18755 GV-ASManager DLL hijacking vulnerability
A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local attacker with write access to an unsafe search directory to execute arbitrary code. By placing a crafted dynamic-link library DLL file into the application search path prior to the legitimate library, the malicious code is...
EUVD-2026-52639
A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local attacker with write access to an unsafe search directory to execute arbitrary code. By placing a crafted dynamic-link library DLL file into the application search path prior to the legitimate library, the malicious code is...
GHSA-69XF-PQRW-596X
creationtimestamp| type| source ---|---|--- 2026-08-04 07:00:04+00:00| published-proof-of-concept| https://t.me/bdufstecru/3360 2026-08-05 00:00:52+00:00| published-proof-of-concept| https://t.me/bdufstecru/3360...
CVE-2026-67312
creationtimestamp| type| source ---|---|--- 2026-08-04 07:00:04+00:00| published-proof-of-concept| https://t.me/bdufstecru/3359 2026-08-05 00:00:52+00:00| published-proof-of-concept| https://t.me/bdufstecru/3359...
CVE-2026-18569
creationtimestamp| type| source ---|---|--- 2026-08-04 06:56:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ja5qoxls5iqpf...
GHSA-P538-C434-8V24
creationtimestamp| type| source ---|---|--- 2026-08-04 06:32:33+00:00| seen| https://gist.github.com/alon710/7c801d57bbc1100bfc82173b2522a257...
WhatsApp account takeover scam asks you to “vote for my friend”
A scam is spreading through WhatsApp with the goal of taking over victims' accounts entirely. It starts with a message that feels harmless and familiar. Someone—often a contact whose account has already been compromised—asks you to support a friend or relative of theirs by voting in an online...
CVE-2026-67610
creationtimestamp| type| source ---|---|--- 2026-08-04 06:08:18+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msadx5y3ju2i...
CVE-2026-41452
creationtimestamp| type| source ---|---|--- 2026-08-04 06:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msadpzw6dd2i 2026-08-12 20:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/97772 2026-08-13 00:00:06+00:00| published-proof-of-concept|...
CVE-2026-16536
The Simple Google Calendar Outlook Events Widget WordPress plugin before 3.1.0 does not validate a user-supplied URL before performing a server-side request, allowing unauthenticated attackers to perform Server-Side Request Forgery attacks and, in some cases, read the response of the internal...
GHSA-MQ44-7P77-Q5H7
creationtimestamp| type| source ---|---|--- 2026-08-04 04:31:10+00:00| seen| https://gist.github.com/alon710/8b85a9db45c3273615bc588dcd240ceb...
CVE-2026-17614
creationtimestamp| type| source ---|---|--- 2026-08-04 04:10:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/bysgnrne72avf...
CVE-2026-69096
creationtimestamp| type| source ---|---|--- 2026-08-04 04:05:00+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3msa533lecw2m...
CVE-2026-69243
creationtimestamp| type| source ---|---|--- 2026-08-04 03:31:26+00:00| seen| https://gist.github.com/alon710/b3523524be79c42fa548f91ed3953ea3 2026-08-04 21:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96645 2026-08-05 00:00:21+00:00| published-proof-of-concept|...
CVE-2026-21011
creationtimestamp| type| source ---|---|--- 2026-08-04 03:00:04+00:00| seen| https://t.me/GithubRedTeam/96519 2026-08-05 00:00:56+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96519...
CVE-2026-18721
A vulnerability has been found in kalcaddle kodbox 1.67 Build 02. This issue affects some unknown processing of the file /user/sso/apiLogin of the component SSO API Login. The manipulation of the argument callbackUrl leads to open redirect. The attack can be initiated remotely. The exploit has be...
Exploit for CVE-2026-21006
--- CVE-2026-21006 – Zigbee Light Link Factory Reset Exploit...