CVE-2026-8453

creationtimestamp| type| source ---|---|--- 2026-05-26 22:26:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrzyr4tzc2e...

CVE-2025-68710

creationtimestamp| type| source ---|---|--- 2026-05-26 22:23:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrztac7fc2r...

CVE-2026-8834

creationtimestamp| type| source ---|---|--- 2026-05-26 22:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmryvo4x4r2s...

WordPress MinhNhut Link Gateway plugin <= 3.6.1 - Authenticated (Admin+) Stored Cross-Site Scripting vulnerability

Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by san6051 - COFFSec in WordPress Plugin MinhNhut Link Gateway versions = 3.6.1...

CVE-2026-3294

An authentication logic vulnerability in multiple TP-Link range extenders allows an unauthenticated attacker on an adjacent network to manipulate a login parameter and reset the administrator password due to insufficient validation. Successful exploitation allows an attacker to obtain full...

CVE-2026-47202

creationtimestamp| type| source ---|---|--- 2026-05-26 19:58:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrrozbwsk2h...

CVE-2026-9567

creationtimestamp| type| source ---|---|--- 2026-05-26 19:43:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrqu5ude32c...

CVE-2026-44728

creationtimestamp| type| source ---|---|--- 2026-05-26 19:33:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrqc64tq32e 2026-05-28 01:37:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmuv42kalp2o...

CVE-2026-24191

creationtimestamp| type| source ---|---|--- 2026-05-26 19:06:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrotgewhw2i...

CVE-2025-33221

creationtimestamp| type| source ---|---|--- 2026-05-26 19:01:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrojvcp4x2h...

CVE-2026-8854

creationtimestamp| type| source ---|---|--- 2026-05-26 19:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmroi3y73g2e...

CVE-2026-24194

creationtimestamp| type| source ---|---|--- 2026-05-26 19:00:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmroh2mqor2i...

CVE-2026-24190

creationtimestamp| type| source ---|---|--- 2026-05-26 18:58:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmroeegm7z2n...

Typebot.io has stored XSS via `javascript`: URI in text bubble links — bot author executes JS on visitors' browsers

Summary The Typebot viewer packages/embeds/js renders anchor tags from rich text bubble content without filtering the javascript: URI scheme. A bot author can set a link URL to javascript:PAYLOAD, which executes in the visitor's browser context when clicked. Since the viewer is typically embedded...

WordPress Google+ Link Name plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by MAJidox in WordPress Plugin Google+ Link Name versions = 1.0...

CVE-2026-48902

CVE-2026-48902 affects Joomla! Core. The password/username reset features generate plain http links for https connections when Force SSL is not explicitly enabled, enabling possible credential exposure via downgraded transport. The issue is documented across multiple feeds (e.g., JOOMLA-1050) and...

CVE-2026-47715

Bugsink is a self-hosted error tracking tool. Prior to 2.2.0, Bugsink issue event pages accept a direct event identifier from the URL and, in affected versions, look up that event without also requiring it to belong to the issue in the URL. This is a project-boundary authorization issue: a...

CVE-2026-45836 Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2capsockgetsndtimeocb Add the same NULL guard already present in l2capsockresumecb and l2capsockreadycb...

CVE-2026-9544

creationtimestamp| type| source ---|---|--- 2026-05-26 15:57:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrebfzcfx2r...

CVE-2026-8633

creationtimestamp| type| source ---|---|--- 2026-05-26 15:40:06+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3mmrdbmewjs2b 2026-05-26 21:05:06+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3mmrvgqw2dx26 2026-05-27 20:07:06+00:00| seen|...