CVE-2026-9028

creationtimestamp| type| source ---|---|--- 2026-07-09 12:52:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7oftgnn72q 2026-09-29 12:47:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117354399908091855...

CVE-2026-9021

creationtimestamp| type| source ---|---|--- 2026-07-09 12:32:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7nbzfdnc2x 2026-09-29 12:47:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117354399908091855...

CVE-2026-9027

creationtimestamp| type| source ---|---|--- 2026-07-09 12:07:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7lvw6qiq25 2026-09-29 12:47:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117354399908091855...

OESA-2026-2969 gzip security update

gzip is a single-file/stream lossless data compression utility, where the resulting compressed file generally has the suffix .gz. Security Fixes: GNU gzip contains a vulnerability in the gzexe utility related to insecure temporary file handling. When the mktemp utility is not available in the...

OESA-2026-2930 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check tdls flag in ieee80211tdlsoper When NL80211TDLSENABLELINK is called, the code only checks if the station exists but not whether it is...

CVE-2026-12590

creationtimestamp| type| source ---|---|--- 2026-07-09 10:29:15+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mq7gg7lj5s2d 2026-07-10 05:29:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbg5qdepx2e 2026-07-21 05:31:05+00:00| seen|...

CVE-2026-47830

creationtimestamp| type| source ---|---|--- 2026-07-09 08:31:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq77tqjgfr27 2026-07-09 17:27:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqa5romrgp2f...

CVE-2026-41857

creationtimestamp| type| source ---|---|--- 2026-07-09 08:21:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq77bti3g22t 2026-07-13 16:54:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqk5sspugi22 2026-07-16 08:03:14+00:00| seen|...

CVE-2026-8848

The Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.22.0. This is due to the plugin not properly verifying that a user is authorized to perform an...

CVE-2026-4653

The Block, Suspend, Report for BuddyPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' parameter in versions up to and including 3.6.4. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with...

CVE-2026-5523

creationtimestamp| type| source ---|---|--- 2026-07-09 08:07:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq76hzxyyb26 2026-07-09 11:49:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq7kvszdyh27 2026-07-10 00:00:23+00:00| seen|...

CVE-2026-12270

creationtimestamp| type| source ---|---|--- 2026-07-09 08:04:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq76d5lxbl2w 2026-07-09 17:40:17+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqa6izod342s...

CVE-2026-11869

creationtimestamp| type| source ---|---|--- 2026-07-09 08:01:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq766nzxj42g...

CVE-2026-11571

creationtimestamp| type| source ---|---|--- 2026-07-09 07:59:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq762jnkum25 2026-07-09 17:47:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqa6wauter26...

EUVD-2026-42519

The Block, Suspend, Report for BuddyPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' parameter in versions up to and including 3.6.4. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with...

CVE-2026-4653 Block, Suspend, Report for BuddyPress <= 3.6.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'link' Parameter

The Block, Suspend, Report for BuddyPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' parameter in versions up to and including 3.6.4. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with...

CVE-2026-4653

The vulnerability CVE-2026-4653 affects the BuddyPress Block, Suspend, Report feature for WordPress. It is a Stored Cross-Site Scripting flaw via the 'link' parameter in BuddyPress versions up to 3.6.4 due to insufficient input sanitization and output escaping. Authenticated users with subscriber...

CVE-2026-4653 Block, Suspend, Report for BuddyPress <= 3.6.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'link' Parameter

The Block, Suspend, Report for BuddyPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' parameter in versions up to and including 3.6.4. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with...

CVE-2026-4653

The Block, Suspend, Report for BuddyPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' parameter in versions up to and including 3.6.4. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with...

GhostApproval Symlink Flaws Could Let Malicious Repos Run Code in AI Coding Agents

Researchers at Wiz found that a flaw in six popular AI coding assistants lets a booby-trapped code project quietly take control of a developer's computer. The assistant asks permission to edit one harmless-looking file, but the write lands on a sensitive one instead. The affected tools are Amazon...