65273 matches found
CVE-2026-17161
creationtimestamp| type| source ---|---|--- 2026-07-29 03:24:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqxzvrrpn2q...
CVE-2026-12939
The Newsletters Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' attribute of the postthumbnail and newsletterspostthumbnail shortcodes in versions up to and including 4.15. This is due to insufficient input sanitization and output escaping in the postthumbnai...
EUVD-2026-50096
The Newsletters Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' attribute of the postthumbnail and newsletterspostthumbnail shortcodes in versions up to and including 4.15. This is due to insufficient input sanitization and output escaping in the postthumbnai...
CVE-2026-12939 Newsletters <= 4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link' Shortcode Attribute
The Newsletters Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' attribute of the postthumbnail and newsletterspostthumbnail shortcodes in versions up to and including 4.15. This is due to insufficient input sanitization and output escaping in the postthumbnai...
GHSA-2XMW-F8J8-WFXC
creationtimestamp| type| source ---|---|--- 2026-07-29 00:31:42+00:00| seen| https://gist.github.com/alon710/3def853e2525c617d6890d62679fbc37...
PT-2026-65692
The PhotoSwipe WordPress plugin through 4.1.1.1 uses the title attribute of author-supplied link markup as a lightbox caption that is written into the page DOM without escaping. Because the title attribute survives the post-content sanitization applied to users who lack the unfiltered html...
ROS-20260729-73-0017
The vulnerability of the Go programming language is related to the incorrect definition of the link before accessing a file. Exploiting this vulnerability can allow an attacker to increase their privileges...
Fedora 43 : kronosnet (2026-56568b6fe8)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-56568b6fe8 advisory. CVE-2026-15811 LOW: encryption key exposure in memory after cryptographic configuration changes. Wipe cryptographic keys with explicitbzero before...
CVE-2026-14958
creationtimestamp| type| source ---|---|--- 2026-07-28 23:34:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrql6dwnqr2i 2026-07-28 23:48:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrqlw6ttae23...
CVE-2026-15064
creationtimestamp| type| source ---|---|--- 2026-07-28 23:24:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqkmgz42s2j 2026-07-30 04:48:01+00:00| seen| https://www.hkcert.org/security-bulletin/ibm-websphere-products-multiple-vulnerabilities20260730...
CVE-2026-15325
creationtimestamp| type| source ---|---|--- 2026-07-28 22:52:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqitavyqz22 2026-07-29 15:09:20+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrs7fjz6hb27 2026-07-30 04:47:05+00:00| seen|...
CVE-2026-55390
creationtimestamp| type| source ---|---|--- 2026-07-28 22:35:32+00:00| published-proof-of-concept| https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-442q-2j6p-642g 2026-07-28 23:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqjc3tw4s2q...
CVE-2026-54719
creationtimestamp| type| source ---|---|--- 2026-07-28 22:30:56+00:00| seen| https://gist.github.com/alon710/9b8006195456ffdcd967a102fe0db5d4 2026-07-28 22:35:03+00:00| published-proof-of-concept| https://github.com/goshs-labs/goshs/security/advisories/GHSA-rmxw-pq4x-3fvh 2026-07-29 00:00:29+00:0...
GHSA-PP92-CRG2-GFV9
creationtimestamp| type| source ---|---|--- 2026-07-28 20:31:48+00:00| seen| https://gist.github.com/alon710/76a4f64bf3e94be3974678cdc55c68d9...
CVE-2026-51271
creationtimestamp| type| source ---|---|--- 2026-07-28 20:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrqa6nmou724 2026-07-29 09:14:39+00:00| seen| https://gist.github.com/programmervuln/18c03cd805634bd9456d90c007a00b27 2026-07-29 16:03:17+00:00| seen|...
CVE-2026-56722
Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, aAn attacker who controls the HTML input can bypass this restriction by embedding a target file path inside an SVG image delivered through a data: URI, because dompdf processes the SVG twice and the second pass does not...
GHSA-85RG-P3FR-XC2F
creationtimestamp| type| source ---|---|--- 2026-07-28 19:31:15+00:00| seen| https://gist.github.com/alon710/543be0bac4447ae891730d56e63e4ffd...
CVE-2026-48388
creationtimestamp| type| source ---|---|--- 2026-07-28 19:22:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrq53ijlk62q...
CVE-2026-51263
creationtimestamp| type| source ---|---|--- 2026-07-28 19:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrq4psk2dz2z 2026-07-29 04:03:07+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mrr26aj6zb2t...