SUSE CVE-2026-76035

Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

OPENSUSE-SU-2026:11561-1 chromedriver-151.0.7922.169-1.1 on GA media

These are all security issues fixed in the chromedriver-151.0.7922.169-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-80613

These are all security issues fixed in the libecpg6-18.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11570-1 python313-django-allauth-65.19.1-1.1 on GA media

These are all security issues fixed in the python313-django-allauth-65.19.1-1.1 package on the GA media of openSUSE Tumbleweed...

The vulnerability of the Linux operating system’s kernel’s media component, which allows a hacker to cause a service failure

The vulnerability of the Linux operating system’s kernel media component is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

OPENSUSE-SU-2026:11565-1 libecpg6-18.6-1.1 on GA media

These are all security issues fixed in the libecpg6-18.6-1.1 package on the GA media of openSUSE Tumbleweed...

Debian dsa-6458 : gir1.2-gst-plugins-bad-1.0 - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6458 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6458-1 [email protected] https://www.debian.org/securit...

CVE-2026-72818

creationtimestamp| type| source ---|---|--- 2026-08-20 23:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtkdyg4ok727 2026-08-21 00:31:12+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mtkj2hszzn25...

CVE-2026-66592

creationtimestamp| type| source ---|---|--- 2026-08-20 13:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjdkgqbuq2c 2026-08-20 14:07:45+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtjg7o3igv2m...

WordPress Social Media & Share Icons plugin <= 2.9.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Bonds in WordPress Plugin Social Media & Share Icons versions = 2.9.9...

CVE-2026-66601

Subscriber Cross Site Scripting XSS in Media LIbrary Assistant = 3.39 versions...

CVE-2026-66600

Author Arbitrary File Upload in Media LIbrary Assistant = 3.39 versions...

EUVD-2026-63342

Subscriber Cross Site Scripting XSS in Media LIbrary Assistant = 3.39 versions...

EUVD-2026-63341

Author Arbitrary File Upload in Media LIbrary Assistant = 3.39 versions...

CVE-2026-66600 WordPress Media LIbrary Assistant plugin <= 3.39 - Arbitrary File Upload vulnerability

Author Arbitrary File Upload in Media LIbrary Assistant = 3.39 versions...

CVE-2026-66600

Media Library Assistant WordPress plugin (versions ≤ 3.39) allows users with the Author role to upload arbitrary files, potentially enabling remote code execution. CVSS 9.1 (Critical) reflects network-exploitable, low-complexity attack with full confidentiality, integrity, and availability impact...

CVE-2026-66601

Subscriber-level authenticated users can inject arbitrary JavaScript into the Media Library Assistant plugin (≤3.39) admin interface, enabling session hijacking or data theft. CVSS 6.5 (MEDIUM). Update to version 3.40 or later; no in-the-wild exploitation reported. See: https://patchstack.com/dat...

CVE-2026-66601 WordPress Media LIbrary Assistant plugin <= 3.39 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in Media LIbrary Assistant = 3.39 versions...

CVE-2026-17153

The AI Agent by SiteGround plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to upload images...

CVE-2026-17153

AI Agent by SiteGround plugin (≤1.2.7) has a missing authorization check on its /generate-content REST endpoint, allowing authenticated Contributor-level users to upload images to the media library despite lacking the upload_files capability. The sg_ai_studio_gutenberg_nonce is issued to any bloc...