CVE-2026-8089 weMail < 2.1.3 - Reflected Cross-Site Scripting

The weMail: Email Marketing, Email Automation, Newsletters, Subscribers & Email Optins for WooCommerce WordPress plugin before 2.1.3 does not properly escape a user-supplied parameter before reflecting it into an HTML attribute on a non-nonce-protected AJAX response, allowing unauthenticated...

CVE-2026-35314

creationtimestamp| type| source ---|---|--- 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8...

CVE-2026-46873

creationtimestamp| type| source ---|---|--- 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8 2026-06-17 11:55:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3moiaxrr3n52v...

CVE-2026-46928

creationtimestamp| type| source ---|---|--- 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8 2026-07-02 09:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpnokxrwqa2o...

CVE-2026-12304

creationtimestamp| type| source ---|---|--- 2026-06-17 05:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mohjsnshui2a 2026-06-17 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260618...

CVE-2026-47749

creationtimestamp| type| source ---|---|--- 2026-06-17 03:00:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mohd3rjm6m2t...

CVE-2026-32967

creationtimestamp| type| source ---|---|--- 2026-06-17 02:13:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mohagpnqt42x 2026-06-18 14:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mol2i4sfak24 2026-06-22 00:31:22+00:00| seen|...

CVE-2026-12465

creationtimestamp| type| source ---|---|--- 2026-06-17 01:56:44+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-google-chrome-56 2026-06-17 06:14:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mohnwvwhdv2f 2026-06-21 18:00:00+00:00| seen|...

CVE-2026-12456

creationtimestamp| type| source ---|---|--- 2026-06-17 01:56:44+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-google-chrome-56 2026-06-17 05:49:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mohmkameuz2f 2026-06-21 18:00:00+00:00| seen|...

CVE-2026-12461

creationtimestamp| type| source ---|---|--- 2026-06-17 01:56:44+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-google-chrome-56 2026-06-17 06:11:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mohnqwr3d72j 2026-06-21 18:00:00+00:00| seen|...

CVE-2026-12466

creationtimestamp| type| source ---|---|--- 2026-06-17 01:56:44+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-google-chrome-56 2026-06-17 05:54:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mohmtan24g25 2026-06-21 18:00:00+00:00| seen|...

CVE-2026-48616

creationtimestamp| type| source ---|---|--- 2026-06-17 00:50:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moh3tgoovh22 2026-06-27 22:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpcjiqi7ax2x...

CVE-2026-39598

creationtimestamp| type| source ---|---|--- 2026-06-17 00:45:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moh3ki2tw62e...

CVE-2026-25470

creationtimestamp| type| source ---|---|--- 2026-06-17 00:21:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moh26rxriy2v...

CVE-2026-49080

creationtimestamp| type| source ---|---|--- 2026-06-17 00:15:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mogzvfr4bj2h...

CVE-2026-48797

creationtimestamp| type| source ---|---|--- 2026-06-17 00:00:39+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mogyzyan552s 2026-06-17 03:38:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mohf6t5rnw25...

PT-2026-79262

Name of the Vulnerable Software and Affected Versions Lightdash versions prior to 1.146.4 Description Lightdash fails to validate webhook URLs provided during scheduled deliveries. The sendWebhook function in packages/backend/src/clients/GoogleChat/GoogleChatClient.ts and...

Bosch Security Systems IP Cameras Cross-site Scripting (CVE-2021-23848)

An error in the URL handler Bosch IP cameras may lead to a reflected cross site scripting XSS in the web-based interface. An attacker with knowledge of the camera address can send a crafted link to a user, which will execute javascript code in the context of the user. This plugin only works with...

CVE-2026-48745: Improper Verification of Source of a Communication Channel

Traccar Client is a GPS tracking mobile app for sending location updates to private servers using the open-source Traccar platform. In versions 9.7.19 and below, a single crafted deep link can silently hijack all GPS tracking parameters and redirect telemetry to an attacker-controlled server. The...

📄 D-Link DSL2600U rom-0 Admin Password Disclosure

Proof of concept that demonstrates a vulnerability in D-Link DSL2600U routers with firmware version 1.08 that allows unauthenticated attackers to download the rom-0 configuration file containing the administrator password...