EUVD-2026-36699

The WP MAPS PRO WordPress plugin before 6.1.1 registers an unauthenticated AJAX action which, given a valid nonce that is publicly emitted on any frontend page enqueuing its map script, unconditionally creates an administrator account and returns a magic-login URL granting interactive admin acces...

CVE-2026-49781

creationtimestamp| type| source ---|---|--- 2026-06-15 05:16:22+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mocjqov2dg2u 2026-06-15 21:14:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moe7cnqii524 2026-06-16 03:00:46+00:00| seen|...

CVE-2026-12207

creationtimestamp| type| source ---|---|--- 2026-06-15 04:33:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moche6j44n27 2026-10-26 19:14:24+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/117508804694397087...

CVE-2026-12211

creationtimestamp| type| source ---|---|--- 2026-06-15 04:28:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moch3a2xrd2b...

CVE-2026-12210

creationtimestamp| type| source ---|---|--- 2026-06-15 04:23:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mocgsbltkd2z...

CVE-2025-31272

creationtimestamp| type| source ---|---|--- 2026-06-15 04:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mocfjgoaes2d...

CVE-2026-38812

creationtimestamp| type| source ---|---|--- 2026-06-15 01:42:25+00:00| seen| https://gist.github.com/jjcjgo/36a5d07c3a66d2df8981075dad926ecd...

CVE-2026-47162

creationtimestamp| type| source ---|---|--- 2026-06-15 01:01:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moc3ivsjqx2n 2026-06-21 22:43:05+00:00| seen| https://bsky.app/profile/canartuc.com/post/3motgzrwjm222...

EUVD-2026-36668

A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component com.tranzmate. Executing a manipulation can lead to improper authorization in handler for custom url scheme. The attack can only be executed locally. The exploit has been...

CVE-2026-12188

creationtimestamp| type| source ---|---|--- 2026-06-15 00:13:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mobyspc63j2o...

CVE-2019-25662

creationtimestamp| type| source ---|---|--- 2026-06-15 00:07:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mobyhqyxlv2f...

CVE-2026-48878: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Subscriber Sensitive Data Exposure in Visual Link Preview = 2.4.1 versions...

CVE-2026-40779: Improper Limitation of a Pathname to a Restricted Directory

Contributor Arbitrary File Deletion in Link Library = 7.8.8 versions...

PT-2026-49329

Name of the Vulnerable Software and Affected Versions Benjamin Jonard Koillection version 1.8.0 Description An authenticated Server-Side Request Forgery SSRF exists in the custom scraper subsystem component. This allows attackers to scan internal resources by supplying a crafted URL. SSRF is a fl...

Winlogon Privilege Escalation

The vulnerability of the Winlogon entry program in Windows operating systems is related to incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2016-20077: Improper Control of Filename for Include/Require Statement in PHP Program

WordPress Plugin Photocart Link 1.6 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting insufficient input validation in decode.php. Attackers can supply base64-encoded file paths in the 'id' parameter to the decode.php endpoin...

PT-2026-49215

WordPress Plugin Photocart Link 1.6 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting insufficient input validation in decode.php. Attackers can supply base64-encoded file paths in the 'id' parameter to the decode.php endpoin...

PT-2026-49421

Contributor Arbitrary File Deletion in Link Library = 7.8.8 versions...

PT-2026-49484

Name of the Vulnerable Software and Affected Versions Visual Link Preview versions prior to 2.4.2 Description An issue in the plugin leads to the exposure of sensitive subscriber data. Recommendations Update to version 2.4.2 or later...

TP-Link Tapo C110 has a vulnerability related to formatted string errors

The TP-Link Tapo C110 is an indoor network camera produced by TP-Link Corporation. The TP-Link Tapo C110 v2 has a vulnerability related to formatted string handling. This vulnerability stems from improper processing of user control inputs in the ONVIF service. Attackers can exploit this...