CVE-2026-55419 Reachy Mini: Unrestricted Upload of File with Dangerous Type

Reachy Mini is an SDK for controlling Reachy Mini robots. Prior to 1.8.2, the Reachy Mini daemon exposes the /api/media/sounds/upload endpoint implemented by the uploadsound method in src/reachymini/daemon/app/routers/media.py without authentication, file-extension checks, content validation, or...

CVE-2026-55419 Reachy Mini: Unrestricted Upload of File with Dangerous Type

Reachy Mini is an SDK for controlling Reachy Mini robots. Prior to 1.8.2, the Reachy Mini daemon exposes the /api/media/sounds/upload endpoint implemented by the uploadsound method in src/reachymini/daemon/app/routers/media.py without authentication, file-extension checks, content validation, or...

EUVD-2026-42395

Plate: Media embed provider metadata can bypass URL sanitization and execute iframe JavaScript...

CVE-2026-55541

creationtimestamp| type| source ---|---|--- 2026-08-25 15:20:58+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mtw4n5te3z2v 2026-08-25 16:35:26+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-pvxx-r596-f5qj 2026-08-26...

CVE-2026-57909

creationtimestamp| type| source ---|---|--- 2026-08-25 12:32:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/aeuy6oq4crqre 2026-08-25 14:07:02+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117156532819331041 2026-08-25 14:07:30+00:00| seen|...

CVE-2026-77824

The Media Sweep – WordPress Media Cleaner plugin for WordPress is vulnerable to generic SQL Injection via the 'fields' parameter in all versions up to, and including, 1.1.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...

EUVD-2026-65459

The Media Sweep – WordPress Media Cleaner plugin for WordPress is vulnerable to generic SQL Injection via the 'fields' parameter in all versions up to, and including, 1.1.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...

CVE-2026-77824

Media Sweep – WordPress Media Cleaner (all versions up to and including 1.1.3 ) is affected by a SQL Injection vulnerability in the 'fields' parameter of its REST API. The root cause is insufficient escaping of the user-supplied parameter combined with lack of proper query preparation, as seen in...

CVE-2026-77824 Media Sweep <= 1.1.3 - Authenticated (Administrator+) SQL Injection via 'fields' Parameter

The Media Sweep – WordPress Media Cleaner plugin for WordPress is vulnerable to generic SQL Injection via the 'fields' parameter in all versions up to, and including, 1.1.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...

CVE-2026-78322

creationtimestamp| type| source ---|---|--- 2026-08-25 09:13:23+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtvi3v4a5t2j...

CVE-2026-78568

creationtimestamp| type| source ---|---|--- 2026-08-25 09:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/117155327251147740 2026-08-25 09:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mtvherzvbl2f 2026-08-25 09:29:16+00:00| seen|...

WordPress CP Media Player plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin CP Media Player versions = 1.3.0...

CVE-2026-78470

creationtimestamp| type| source ---|---|--- 2026-08-25 06:20:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6z5fvhdppvwdy...

CVE-2026-78477

creationtimestamp| type| source ---|---|--- 2026-08-25 06:00:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117154619350415458 2026-08-25 06:00:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mtv5cuxhfr2w 2026-08-25 06:34:31+00:00| seen|...

cve-2021-29447_auto-script

CVE-2021-29447: WordPress Media Library XXE-Schwachstelle Dieses Repository beschreibt die CVE-2021-29447-Schwachstelle, einen kritischen Sicherheitsfehler in WordPress, der authentifizierte XML-External-Entity-Angriffe XXE über die Media Library ermöglichte. Es enthält außerdem ein automatisches...

CVE-2026-76847

creationtimestamp| type| source ---|---|--- 2026-08-25 05:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtv32okhsi2e...

CVE-2026-19892

creationtimestamp| type| source ---|---|--- 2026-08-25 04:41:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3nssbl62c5kwt 2026-08-25 07:01:03+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtvapa5oog2z 2026-08-25 08:15:10+00:00| seen|...

CVE-2021-29447-POC

CVE-2021-29447-POC परिचय यह स्क्रिप्ट Wordpress में मीडिया अपलोड कार्यक्षमता में CVE-2021-29447 का शोषण करने और XXE के माध्यम से फ़ाइलें निकालने के लिए आवश्यक चरणों को स्वचालित करती है। उपयोग root@kitploit: ./generatepayloads.py --help usage: generatepayloads.py -h --local-ip LOCALIP --local-port...

CVE-2008-4654

CVE-2008-4654 VideoLAN VLC media player 0.9.4 Media Player ty.c Pufferüberlauf Diff...

CVE-2026-78676

creationtimestamp| type| source ---|---|--- 2026-08-25 02:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtuqyskh5o2y 2026-08-25 03:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/117153911650352822 2026-08-25 03:00:28+00:00| seen|...