PT-2026-34217

Name of the Vulnerable Software and Affected Versions BigBlueButton versions prior to 3.0.24 Description An open redirect exists in the 'bigbluebutton/api/join' endpoint through the logoutURL parameter. This occurs when requests with incorrect checksums are handled improperly, allowing a redirect...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013047)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013047 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: 6lowpan: reset link-local header on ipv6 recv path Bluetooth 6lowpan.c netdev has...

VulnCheck KEV: CVE-2025-29635

A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/setprohibiting via the corresponding function, triggering remote command execution...

Bagisto 代码问题漏洞

Bagisto is an open-source e-commerce framework developed by Webkul Software in India. Versions of Bagisto 2.3.15 and earlier contained code vulnerabilities. These vulnerabilities stemmed from improper handling of the copy function in the Downloadable Link Handler component, which could lead to...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-007044)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007044 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix deletion race condition System crash when using debug kernel due to link list...

The vulnerability in the web interface for controlling the Cisco Unity Connection integrated messaging system allows attackers to carry out phishing attacks.

The vulnerability of the Cisco Unity Connection messaging system’s web interface is related to the redirection of the URL to an unreliable website. Exploiting this vulnerability allows a malicious actor to carry out phishing attacks using a specially created malicious link...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011098)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011098 advisory. In the Linux kernel, the following vulnerability has been resolved: cxl: fix possible null-ptr-deref in cxlguestinitafu|adapter If deviceregister fails in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013197)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013197 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: ensure sane device mtu in tunnels Another syzbot report 1 with no reproducer hints at a bug...

CVE-2026-5721

The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 6.5.0.4. This is due to insufficient input sanitization and output escaping in the prepareCellOutput method of the...

CVE-2026-22051

creationtimestamp| type| source ---|---|--- 2026-04-20 23:03:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxlbto5sc2c 2026-04-22 12:45:31+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mk3jo4n4m62w...

CVE-2026-5721 wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin <= 6.5.0.4 - Unauthenticated Stored Cross-Site Scripting via CSV/Excel Data Import

The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 6.5.0.4. This is due to insufficient input sanitization and output escaping in the prepareCellOutput method of the...

CVE-2026-5721

The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 6.5.0.4. This is due to insufficient input sanitization and output escaping in the prepareCellOutput method of the...

CVE-2026-29647

creationtimestamp| type| source ---|---|--- 2026-04-20 22:09:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxiacjxcy2e...

CVE-2026-32604

creationtimestamp| type| source ---|---|--- 2026-04-20 21:37:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjxghw2lna2z 2026-04-20 22:21:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxiwrumt22i 2026-04-20 22:48:46+00:00| seen|...

Vercel Breach Linked to Context.ai, ShinyHunters Says It’s Not Involved

Vercel confirms a breach linked to Context.ai as a hacker lists alleged data for $2M. ShinyHunters denies involvement and flags imposters...

CVE-2026-6257

creationtimestamp| type| source ---|---|--- 2026-04-20 20:23:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjxccsfnrj2q 2026-04-20 21:22:19+00:00| published-proof-of-concept| Telegram/OLcxrKJ5zAhCDZ5T6GCelVBzr2kWns3QejwnSLKnpZyw 2026-04-21 01:30:30+00:00| seen|...

CVE-2026-39110

creationtimestamp| type| source ---|---|--- 2026-04-20 20:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjxb33hgis2l...

CVE-2026-23757

creationtimestamp| type| source ---|---|--- 2026-04-20 19:48:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxaei2ymu2p...

EUVD-2026-23929

GFI HelpDesk before 4.99.10 contains a stored cross-site scripting vulnerability in the Reports module where the title parameter is passed directly to SWIFTReport::Create without HTML sanitization. Attackers can inject arbitrary JavaScript into the report title field when creating or editing a...

EUVD-2025-209534

A vulnerability exists in the Buffalo Link Station version 1.85-0.01 that allows unauthenticated or guest-level users to enumerate valid usernames and their associated privilege roles. The issue is triggered by modifying a parameter within requests sent to the /nasapi endpoint...