CVE-2026-15032 wpDiscuz < 7.6.60 - Unauthenticated Stored XSS via Image URL Conversion

The Comments WordPress plugin before 7.6.60 does not properly escape a user-supplied URL before outputting it inside an HTML attribute, allowing unauthenticated users to store a Cross-Site Scripting payload that executes in the browser of any user, including administrators, who views the affected...

CVE-2026-15032 wpDiscuz < 7.6.60 - Unauthenticated Stored XSS via Image URL Conversion

The Comments WordPress plugin before 7.6.60 does not properly escape a user-supplied URL before outputting it inside an HTML attribute, allowing unauthenticated users to store a Cross-Site Scripting payload that executes in the browser of any user, including administrators, who views the affected...

CVE-2026-49163

creationtimestamp| type| source ---|---|--- 2026-08-07 05:00:06+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mshrkg7rfy2g 2026-08-07 15:12:52+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117054869893780449 2026-08-11 19:00:39+00:00| seen|...

CVE-2026-70559

creationtimestamp| type| source ---|---|--- 2026-08-07 05:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96974 2026-08-07 10:15:04+00:00| published-proof-of-concept| Telegram/WS6QG7O3daDhEGVi670FSZbAHcCdG6YEmYMAs3H7lOdyiY 2026-08-07 16:02:15+00:00| seen|...

GHSA-HMQG-CXWW-WQHQ

creationtimestamp| type| source ---|---|--- 2026-08-07 04:31:19+00:00| seen| https://gist.github.com/alon710/a294e95161c29ae2353666d3ed774930...

CVE-2026-19149

creationtimestamp| type| source ---|---|--- 2026-08-07 02:56:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mshkmnjejr2z 2026-08-07 04:46:06+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260807 2026-08-13 09:46:45+00:00| seen|...

GHSA-RVMM-V933-JGXQ

creationtimestamp| type| source ---|---|--- 2026-08-07 01:35:03+00:00| seen| https://gist.github.com/alon710/44b00a029eb5e56bac1f996f02574592...

CVE-2026-5857

creationtimestamp| type| source ---|---|--- 2026-08-07 00:37:02+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mshctz6ra52l 2026-08-10 02:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msoywprfwe23...

GHSA-596P-6JV8-775V

creationtimestamp| type| source ---|---|--- 2026-08-07 00:33:31+00:00| seen| https://gist.github.com/alon710/c7b44a1ea6b80e7066b89d9f2735b13f...

CVE-2026-70638

creationtimestamp| type| source ---|---|--- 2026-08-07 00:13:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ciicqoidlqxgn 2026-08-08 23:32:42+00:00| seen| Telegram/m7tRmG3nQSXvUZW6DMLMvOpR9GoJzg-MAOp80VZqy5JWD8 2026-08-09 00:05:53+00:00| published-proof-of-concept|...

Linux Distros Unpatched Vulnerability : CVE-2026-71478

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 1.5.0 until 2.9.0, the AttributesExtension's href and src unsafe-link...

Cisco Catalyst SD-WAN Software Security Hardening (cisco-sa-hardening-sdwan-faLcR3K)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by multiple vulnerabilities. - Multiple vulnerabilities in Cisco Catalyst SD-WAN Software could allow an authenticated, remote attacker to conduct path traversal attacks, gain unauthorized access, or cause a denial ...

SUSE CVE-2026-64601

In the Linux kernel, the following vulnerability has been resolved: ALSA: us144mkii: captureurbcomplete: redundant usbanchorurb corrupts anchor list on each resubmission In captureurbcomplete, usbanchorurb is called on every completion callback, but the URB is already anchored from the initial...

CVE-2026-19138

creationtimestamp| type| source ---|---|--- 2026-08-06 23:24:57+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117051134731540251 2026-08-07 04:45:41+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260807 2026-08-13 09:46:23+00:00| seen|...

CVE-2026-15918

creationtimestamp| type| source ---|---|--- 2026-08-06 23:15:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msh6bkcefd2u...

GHSA-957R-QF9P-67XW

creationtimestamp| type| source ---|---|--- 2026-08-06 22:32:31+00:00| seen| https://gist.github.com/alon710/40498cd7ab099bfd269056fcd2fad5d7 2026-08-07 00:05:24+00:00| seen| https://gist.github.com/alon710/40498cd7ab099bfd269056fcd2fad5d7...

DEBIAN-CVE-2026-71478

league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 1.5.0 until 2.9.0, the AttributesExtension's href and src unsafe-link filter can be bypassed by embedding control bytes, such as a tab, carriage return, line feed, or leading C0 control character, in a...

CVE-2026-71478

league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 1.5.0 until 2.9.0, the AttributesExtension's href and src unsafe-link filter can be bypassed by embedding control bytes, such as a tab, carriage return, line feed, or leading C0 control character, in a...

CVE-2026-71478

league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 1.5.0 until 2.9.0, the AttributesExtension's href and src unsafe-link filter can be bypassed by embedding control bytes, such as a tab, carriage return, line feed, or leading C0 control character, in a...

UBUNTU-CVE-2026-71478

league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 1.5.0 until 2.9.0, the AttributesExtension's href and src unsafe-link filter can be bypassed by embedding control bytes, such as a tab, carriage return, line feed, or leading C0 control character, in a...