CVE-2026-81575

creationtimestamp| type| source ---|---|--- 2026-08-27 11:01:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu2p2ezi6m22 2026-09-15 08:17:47+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mvk6rmmcumg2...

CVE-2026-78281

Unauthenticated Cross Site Scripting XSS in CP Media Player = 1.3.0 versions...

CVE-2026-80589

creationtimestamp| type| source ---|---|--- 2026-08-27 09:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu2ibwul2h2p 2026-08-27 09:02:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu2ifsjxiz2r 2026-08-27 16:23:29+00:00| seen|...

CVE-2026-78281 WordPress CP Media Player plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in CP Media Player = 1.3.0 versions...

CVE-2026-78281

The WordPress plugin CP Media Player (versions

EUVD-2026-66940

Unauthenticated Cross Site Scripting XSS in CP Media Player = 1.3.0 versions...

CVE-2026-81485

A security vulnerability has been detected in danielpopamd linkedin-ads-mcp 1.0.0. Affected by this vulnerability is the function fs.readFileSync of the file src/tools/campaign-management.ts of the component Media Upload. Such manipulation of the argument filePath leads to path traversal. The...

CVE-2026-81485

linkedin-ads-mcp (danielpopamd) version 1.0.0 is affected by a path traversal vulnerability in the Media Upload component. The root cause is the fs.readFileSync function in src/tools/campaign-management.ts, where the filePath argument is not properly validated, allowing a remote attacker to read ...

EUVD-2026-66832

A security vulnerability has been detected in danielpopamd linkedin-ads-mcp 1.0.0. Affected by this vulnerability is the function fs.readFileSync of the file src/tools/campaign-management.ts of the component Media Upload. Such manipulation of the argument filePath leads to path traversal. The...

CVE-2026-81485 danielpopamd linkedin-ads-mcp Media Upload campaign-management.ts fs.readFileSync path traversal

A security vulnerability has been detected in danielpopamd linkedin-ads-mcp 1.0.0. Affected by this vulnerability is the function fs.readFileSync of the file src/tools/campaign-management.ts of the component Media Upload. Such manipulation of the argument filePath leads to path traversal. The...

PT-2026-83377

A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost function. The function uses a path-based chown on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing libvirtd running as...

OPENSUSE-SU-2026:11623-1 libopenssl-3-devel-3.5.3-8.1 on GA media

These are all security issues fixed in the libopenssl-3-devel-3.5.3-8.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-61617

creationtimestamp| type| source ---|---|--- 2026-08-26 23:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtzgrrh5tj26 2026-08-27 00:07:53+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mtzkkcu5sd23...

CVE-2026-61792

creationtimestamp| type| source ---|---|--- 2026-08-26 21:59:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtzdfkzhsb27...

CVE-2026-80196

creationtimestamp| type| source ---|---|--- 2026-08-26 18:04:02+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117163127023272638 2026-08-26 18:04:02+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mtyw7nsnmz2g...

CVE-2026-79177

A flaw was found in the Media component of Google Chrome on Windows. Incorrect authorization allows a remote attacker, who has already compromised the renderer process, to bypass system access restrictions. This can be achieved by crafting a malicious HTML page, leading to unauthorized access...

CVE-2026-79004

A flaw was found in Media in Google Chrome. A remote attacker, after compromising the renderer process, could exploit an out-of-bounds read vulnerability by using a specially crafted HTML page. This could allow the attacker to read sensitive memory outside of the browser's security sandbox, leadi...

CVE-2026-81036

creationtimestamp| type| source ---|---|--- 2026-08-26 16:33:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/35eic5eqwzws6 2026-08-26 17:02:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtysriahpj2u...

CVE-2026-79020

An out of bounds read flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514017820...

CVE-2026-78900

A flaw was found in Chromium's Media component. Improper input validation allows a remote attacker to craft a malicious HTML page. When processed, this page can lead to arbitrary code execution outside the browser's security sandbox, potentially compromising the user's system...