CVE-2025-69054

creationtimestamp| type| source ---|---|--- 2026-01-27 17:26:11+00:00| seen| Telegram/MruT4zr3HDjAavow11whz2OZvcarBdRDLsNpY1B7JokuVE...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the adminorownerrequired function in avatarview.py. An attacker can alter other users' profile images by sending crafted requests while authenticated with standard user privileges...

openSUSE Security Advisory (SUSE-SU-2026:0254-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EUVD-2026-4543

The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the actionimportmodule function in all versions up to, and including, 7.8.9.2. This makes it possible for authenticated attackers, wi...

CVE-2026-22462

Cross-Site Request Forgery CSRF vulnerability in richardevcom Add Polylang support for Customizer add-polylang-support-for-customizer allows Cross Site Request Forgery.This issue affects Add Polylang support for Customizer: from n/a through = 1.4.5...

CVE-2026-22989

creationtimestamp| type| source ---|---|--- 2026-01-23 17:30:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md4a3qx5q72c...

CVE-2026-22275

creationtimestamp| type| source ---|---|--- 2026-01-23 11:40:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md3mjds4is2r...

Ubuntu: Security Advisory (USN-7970-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-52758

creationtimestamp| type| source ---|---|--- 2026-01-20 20:03:20+00:00| seen| Telegram/zOxttBEWcLJTn2G6nP1tXqKkQQQmPMmLYPUBKMXm2tspWT0...

CVE-2025-54495

creationtimestamp| type| source ---|---|--- 2026-01-20 15:30:11+00:00| seen| https://infosec.place/objects/e6298a2d-7899-41c3-86b2-15fd5def114b...

MiracleLinux 9 : dotnet7.0-7.0.112-1.el9.ML.1 (AXSA:2023-6508:28)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6508:28 advisory. HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack Rapid Reset Attack CVE-2023-44487 Tenable has extracted the preceding description...

CVE-2025-15535

A security flaw has been discovered in nicbarker clay up to 0.14. This affects the function ClayMeasureTextCached in the library clay.h. The manipulation results in null pointer dereference. The attack is only possible with local access. The exploit has been released to the public and may be used...

WordPress WP Forms Signature Contract Add-On plugin <= 1.8.2 - Broken Access Control to Notice Dismissal vulnerability

Broken Access Control to Notice Dismissal vulnerability discovered by Nabil Irawan in WordPress Plugin WP Forms Signature Contract Add-On versions = 1.8.2...

EUVD-2026-3180

A vulnerability was detected in itsourcecode Society Management System 1.0. Impacted is an unknown function of the file /admin/addactivity.php. Performing a manipulation of the argument Title results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and m...

Black Basta Ransomware Leader Added to EU Most Wanted and INTERPOL Red Notice

Ukrainian and German law enforcement authorities have identified two Ukrainians suspected of working for the Russia-linked ransomware-as-a-service RaaS group Black Basta. In addition, the group's alleged leader, a 35-year-old Russian national named Oleg Evgenievich Nefedov Нефедов Олег Евгеньевич...

EUVD-2026-2945

lucy-xss-filter before commit e5826c0 allows an attacker to execute malicious JavaScript due to improper sanitization caused by misconfigured default superset rule files...

MiracleLinux 4 : coreutils-8.4-46.0.1.AXS4 (AXSA:2017-1611:01)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2017-1611:01 advisory. These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages. Security issues fixed with this...

CVE-2026-22912

creationtimestamp| type| source ---|---|--- 2026-01-15 14:23:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mchrvvnxjj22 2026-01-15 15:12:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115899757567671679...

CVE-2026-22640

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2025-71142

creationtimestamp| type| source ---|---|--- 2026-01-14 15:43:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcffvjkldv2x 2026-06-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260602 2026-07-09 00:46:33+00:00| seen...