CVE-2026-14231

creationtimestamp| type| source ---|---|--- 2026-08-08 06:18:14+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mskgbcinlw2o 2026-08-09 02:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msmjd25xw52y...

CVE-2026-16535 Link Library < 7.9.4 - Reflected XSS via Thumbs-Rating likelabel

The Link Library WordPress plugin before 7.9.4 does not sanitise and escape a parameter before reflecting it back in a response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against users who can be tricked into performing an action...

EUVD-2026-54732

The Link Library WordPress plugin before 7.9.4 does not sanitise and escape a parameter before reflecting it back in a response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against users who can be tricked into performing an action...

CVE-2026-16535

The CVE concerns the Link Library WordPress plugin prior to 7.9.4. The vulnerability is a Reflected Cross-Site Scripting (XSS) flaw caused by the plugin not sanitising and escaping a parameter before reflecting it in a response. This allows unauthenticated attackers to trick users into performing...

CVE-2026-16535

The Link Library WordPress plugin before 7.9.4 does not sanitise and escape a parameter before reflecting it back in a response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against users who can be tricked into performing an action...

GHSA-C9W5-RWH3-7PM9

creationtimestamp| type| source ---|---|--- 2026-08-08 05:33:09+00:00| seen| https://gist.github.com/alon710/888e29b3ee03ee26d9a2341be25e1c36...

GHSA-F88M-G3JW-G9CJ

creationtimestamp| type| source ---|---|--- 2026-08-08 04:17:23+00:00| seen| https://gist.github.com/farrelalvis/1030dc3a5520ef382113c429daf63288 2026-09-06 11:40:11+00:00| seen| https://bsky.app/profile/kakkokari-gtyih.misskey.io.ap.brid.gy/post/3mutvv2wexkm2...

GHSA-94G3-G5V7-Q4JG

creationtimestamp| type| source ---|---|--- 2026-08-08 03:53:49+00:00| seen| https://bsky.app/profile/mel-echosphere.bsky.social/post/3msk6crnt3x2y...

CVE-2026-32935

creationtimestamp| type| source ---|---|--- 2026-08-08 03:53:48+00:00| seen| https://bsky.app/profile/mel-echosphere.bsky.social/post/3msk6crnt3x2y...

GHSA-GM37-52C6-37MW

creationtimestamp| type| source ---|---|--- 2026-08-08 02:32:35+00:00| seen| https://gist.github.com/alon710/6f3e0768fc0386f4c965af62333fef78...

GHSA-9HJ4-R449-HFVC

creationtimestamp| type| source ---|---|--- 2026-08-08 01:33:52+00:00| seen| https://gist.github.com/alon710/ad9de868f19ed1752a611a888e617195...

PT-2026-69215

Name of the Vulnerable Software and Affected Versions D-Link DWR-M961 hardware version C1 versions prior to 1.1.5 C1 202607071108 Description A command injection issue exists in the '/boafrm/formUSSDSetup' endpoint. A remote attacker can inject arbitrary malicious commands through the ussdValue a...

PT-2026-69220

Name of the Vulnerable Software and Affected Versions D-Link DWR-M961 hardware version C1 versions prior to 1.1.5 C1 202607071108 Description A command injection issue exists in the '/boafrm/formL2tpv3ConfigSetup' endpoint. A remote attacker can inject arbitrary malicious commands through the...

CVE-2026-64676

creationtimestamp| type| source ---|---|--- 2026-08-07 22:58:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ctob55wdrm6sp...

GHSA-F23P-VX2J-J53R

creationtimestamp| type| source ---|---|--- 2026-08-07 22:31:14+00:00| seen| https://gist.github.com/alon710/6634ad7314d99c5586618c1848016378 2026-08-08 00:01:19+00:00| seen| https://gist.github.com/alon710/6634ad7314d99c5586618c1848016378...

CVE-2026-71850

creationtimestamp| type| source ---|---|--- 2026-08-07 22:31:14+00:00| seen| https://gist.github.com/alon710/6634ad7314d99c5586618c1848016378 2026-08-08 00:01:19+00:00| seen| https://gist.github.com/alon710/6634ad7314d99c5586618c1848016378...

GHSA-5P4M-2WFM-XMQJ

creationtimestamp| type| source ---|---|--- 2026-08-07 22:06:55+00:00| seen| https://gist.github.com/gomesalexandre/8cd74b41b9830109d823dcb777041502 2026-09-03 19:24:03+00:00| seen| https://gist.github.com/konard/05d19a59942ef51514e30abcc55dbc13 2026-09-03 20:23:57+00:00| seen|...

CVE-2025-63235

creationtimestamp| type| source ---|---|--- 2026-08-07 21:51:08+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msjk2bvxxh2c 2026-08-08 07:01:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mskirwemci2y...

CVE-2026-9031

Summary: CVE-2026-9031 is an input validation vulnerability in the HTTP-WRITEOEM handler of the TP-Link Archer A6 web interface. The weakness stems from insufficient validation of user-supplied data before it is processed by internal flash-write handling logic. Impact (as documented): Successful ...

CVE-2026-9030 Authenticated Denial-of-Service in HTTPD Service in TP-Link Archer A6

A denial-of-service vulnerability exists in httpd service on Archer A6 v4 where the asynchronous systool instruction handlng path in httpd does not properly synchronize or safely manage concurrent systool operations. By sending crafted systool instructions through the asynchronous request path,...