CVE-2026-57333 WordPress Link Whisper Free plugin <= 0.9.4 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Link Whisper Free = 0.9.4 versions...

EUVD-2026-40104

Unauthenticated Cross Site Scripting XSS in Link Whisper Free = 0.9.4 versions...

CVE-2026-57333 WordPress Link Whisper Free plugin <= 0.9.4 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Link Whisper Free = 0.9.4 versions...

CVE-2026-57333

CVE-2026-57333 describes an unauthenticated reflected Cross Site Scripting (XSS) vulnerability in the WordPress plugin Link Whisper Free , affecting versions up to and including 0.9.4 . The connected sources consistently identify it as a reflected XSS issue in the Free plugin; no root-cause detai...

CVE-2026-57333

Unauthenticated Cross Site Scripting XSS in Link Whisper Free = 0.9.4 versions...

CVE-2026-41991

creationtimestamp| type| source ---|---|--- 2026-06-29 13:25:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgllesxl72e 2026-06-29 20:59:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphexg5mdh2e 2026-07-01 02:33:52+00:00| seen|...

CVE-2026-13559

creationtimestamp| type| source ---|---|--- 2026-06-29 13:20:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgle4ga2j2o...

CVE-2026-54369

A flaw was found in the acl package, specifically within its libacl pathname-based functions. A local attacker could exploit this vulnerability by using a symbolic link to replace a pathname component. This could allow the attacker to redirect access control list ACL read or write operations to...

CVE-2026-13560

creationtimestamp| type| source ---|---|--- 2026-06-29 12:42:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgja2ndnm2n 2026-06-29 20:16:46+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphclnasu625...

CVE-2026-13563

creationtimestamp| type| source ---|---|--- 2026-06-29 12:42:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgj76gdbe2t 2026-06-29 19:36:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphadfcnq32x 2026-06-29 20:19:24+00:00| seen|...

EUVD-2026-40086

acl before version 2.4.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link between an lstat check and subsequent symlink-following operations such as stat, chown,...

CVE-2026-54370

acl before version 2.4.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link between an lstat check and subsequent symlink-following operations such as stat, chown,...

CVE-2026-41992

creationtimestamp| type| source ---|---|--- 2026-06-29 12:36:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgivbc3n625 2026-06-29 20:59:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphey2ccpx2g 2026-07-01 02:33:54+00:00| seen|...

EUVD-2026-40084

A flaw was found in the vscode-java extension, which provides Java language support for Visual Studio Code. The extension incorrectly trusts all Markdown content in JavaDoc hovers, allowing a malicious Java file to include hidden commands. If a user clicks a specially crafted link within a JavaDo...

UBUNTU-CVE-2026-41991

GNU gzip contains a vulnerability in the gzexe utility related to insecure temporary file handling. When the mktemp utility is not available in the user’s PATH, gzexe falls back to constructing a temporary file path based solely on the process ID PID. This predictable filename is created without...

pyLoad: Server-Side Request Forgery via Download Link Submission Enables Cloud Metadata Exfiltration

SummaryPyLoad's download engine accepts arbitrary URLs without validation, enabling Server-Side Request Forgery SSRF attacks. An authenticated attacker can exploit this to access internal network services and exfiltrate cloud provider metadata. On DigitalOcean droplets, this exposes sensitive...

PYSEC-2026-431 OpenStack Neutron allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a link-local source address...

OpenStack Neutron allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a link-local source address...

CVE-2026-13549

creationtimestamp| type| source ---|---|--- 2026-06-29 11:43:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgfw2fged2g...

CVE-2026-57965

creationtimestamp| type| source ---|---|--- 2026-06-29 11:37:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgfkxxaqx2d 2026-06-29 12:59:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgk53jybe2t...