CVE-2026-11354

The Participants Database plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.8.3 via the 'id' parameter. This makes it possible for unauthenticated attackers to overwrite arbitrary participant records by numeric ID and redirect the...

CVE-2026-45820

creationtimestamp| type| source ---|---|--- 2026-07-24 02:48:49+00:00| seen| https://bsky.app/profile/opsmatters.com/post/3mredorzn2s2t 2026-08-04 04:47:06+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3msa7gdsqch2o 2026-09-04 12:37:18+00:00| seen|...

CVE-2026-11354

The Participants Database plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.8.3 via the 'id' parameter. This makes it possible for unauthenticated attackers to overwrite arbitrary participant records by numeric ID and redirect the...

EUVD-2026-48462

The Firelight Lightbox plugin for WordPress is vulnerable to Stored DOM Cross-Site Scripting in versions up to and including 2.3.20. This is due to insufficient sanitization of the href attribute value within the FancyBox V2 PDF beforeLoad JavaScript callback generated in inc/fancybox-2.php, wher...

CVE-2026-16756

creationtimestamp| type| source ---|---|--- 2026-07-24 01:01:22+00:00| seen| https://bsky.app/profile/rindrics.com/post/3mre5olrots2j 2026-07-25 04:31:18+00:00| seen| https://gist.github.com/alon710/5da01f85fee825f05b5c606f0085a6c9...

CVE-2026-54120

creationtimestamp| type| source ---|---|--- 2026-07-24 00:22:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mre3igg2c62a 2026-07-24 13:08:20+00:00| seen| https://bsky.app/profile/thecircuitry.to/post/3mrfgcioxnn2j 2026-07-24 13:30:31+00:00| seen|...

CVE-2026-56165

creationtimestamp| type| source ---|---|--- 2026-07-24 00:22:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mre3iezou62v 2026-07-24 05:00:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrel2wg5nh2f 2026-07-31 02:07:06+00:00| seen|...

PT-2026-64409

Name of the Vulnerable Software and Affected Versions Milkdown versions prior to 7.21.3 Description A stored cross-site scripting issue exists in the @milkdown/preset-commonmark and @milkdown/components packages. Attackers with document write access can execute arbitrary JavaScript in the browser...

PT-2026-64224

The Participants Database plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.8.3 via the 'id' parameter. This makes it possible for unauthenticated attackers to overwrite arbitrary participant records by numeric ID and redirect the priva...

PT-2026-67307

Name of the Vulnerable Software and Affected Versions better-auth versions 1.1.3 through 1.6.21 better-auth versions 1.7.0-beta.0 through 1.7.0-beta.9 Description A pre-account hijacking flaw allows account takeover when open email and password registration is enabled alongside magic-link or...

PT-2026-64334

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A stack buffer overflow occurs in the dc process dmub aux transfer async function when payload-length bytes are copied into a 16-byte stack buffer dpaux.data16. Because the check is...

PT-2026-64297

Name of the Vulnerable Software and Affected Versions Loytec L-INX versions prior to 8.4.17 Loytec L-GATE versions prior to 8.4.17 Loytec L-ROC versions prior to 8.4.17 Loytec L-IOB versions prior to 8.4.17 Loytec L-DALI versions prior to 8.4.17 Loytec L-VIS versions prior to 8.4.17 Loytec L-PAD...

CVE-2026-12503: Improper Link Resolution Before File Access

Improper Link Resolution CWE-59 in /usr/bin/larmstarter in Loytec L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows an authenticated larmapp attacker to make /etc/passwd writable by the larmapp group leading to root privilege escalation via a symlink attack on...

PT-2026-67617

Summary The Budibase AI chat-link handoff flow GET/POST /api/chat-links/:instance/:token/handoff binds an external chat identity Slack/Discord/MS Teams/Telegram to a Budibase user account. The confirmation endpoint is on a public route no CSRF middleware, no auth-group gate and the only credentia...

PT-2026-64253

A DLL hijacking vulnerability exists in the GeoVision GV-IP Device Utility desktop application. The application loads one or more dynamic-link libraries DLLs from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library locatio...

PT-2026-64302

Name of the Vulnerable Software and Affected Versions Loytec LWEB-802 versions prior to 5.0.8 Description Reflected Cross-Site Scripting occurs when an unauthenticated remote attacker executes arbitrary JavaScript in a victim's browser. This allows the attacker to perform actions using the victim...

PT-2026-64377

Name of the Vulnerable Software and Affected Versions sysPass versions prior to 3.2.12 Description Authenticated users possessing the PUBLICLINK CREATE profile flag can trigger unauthorized decryption and persistent storage of any vault account password. This occurs due to missing AccountAcl chec...

PT-2026-64301

Name of the Vulnerable Software and Affected Versions Loytec LWEB-802 versions prior to 5.0.8 Description An issue exists where sensitive information is exposed within the browser localStorage. This allows an unauthenticated remote attacker to leak stored management credentials by using a crafted...

CVE-2026-55729: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information CWE-200 in LWEB802 browser localStorage in Loytec LWEB-802 before 5.0.8 on all platforms allows an unauthenticated remote attacker to leak stored management credentials via a crafted link...

CVE-2025-71389

creationtimestamp| type| source ---|---|--- 2026-07-23 22:22:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdurrtxmt2v 2026-07-23 23:01:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrdwyjh62x2a 2026-07-28 20:00:07+00:00| seen|...