CVE-2026-80138

creationtimestamp| type| source ---|---|--- 2026-08-26 00:01:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtwzq5epzv2u 2026-08-26 00:08:04+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtx23pmcxz25 2026-08-26 01:50:06+00:00| seen|...

PT-2026-82217

Name of the Vulnerable Software and Affected Versions OpenMetadata versions prior to 2.0.0 Description The software accepts a caller-supplied post-authentication redirect target and appends the issued token to it. The SamlLoginServlet reads the callback request parameter and stores it in the HTTP...

CVE-2026-80200 Kimai before 2.53.0 Open Redirect via RelayState

Kimai before 2.53.0 contains an open redirect vulnerability in the SAML authentication success handler that accepts unvalidated RelayState POST parameters as redirect destinations. Attackers with IdP access can supply malicious RelayState values to redirect authenticated users to...

CVE-2026-80186

creationtimestamp| type| source ---|---|--- 2026-08-25 22:59:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtwwbvvglr27...

CVE-2026-78379

creationtimestamp| type| source ---|---|--- 2026-08-25 20:08:16+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtwmovwkty2m 2026-08-26 01:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtx5kkus2g2p 2026-08-26 14:47:54+00:00| seen|...

CVE-2022-50998

creationtimestamp| type| source ---|---|--- 2026-08-25 18:54:56+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtwilrryzn2j...

CVE-2024-58378

creationtimestamp| type| source ---|---|--- 2026-08-25 18:07:50+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtwfxkocp42c...

CVE-2026-70550

creationtimestamp| type| source ---|---|--- 2026-08-25 16:14:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/a2aqosgh42arr 2026-09-01 13:55:16+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muhl4f5ksr2k...

CVE-2026-79657

creationtimestamp| type| source ---|---|--- 2026-08-25 14:07:47+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtvykcwfyn24 2026-08-25 21:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtwrt2mobg2t 2026-08-28 15:00:04+00:00| published-proof-of-concept|...

CVE-2026-79671

creationtimestamp| type| source ---|---|--- 2026-08-25 12:20:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5gnu35b4glaqj...

CVE-2026-75908

The Newsletters plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.17. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with author-level access and...

CVE-2026-75908 Newsletters <= 4.17 - Missing Authorization to Authenticated (Author+) Arbitrary Modification via 'newsletters_mailinglistsroles' POST Parameter

The Newsletters plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.17. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with author-level access and...

EUVD-2026-65464

The Newsletters plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.17. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with author-level access and...

CVE-2026-75908

The Newsletters plugin for WordPress (all versions up to and including 4.17 ) is susceptible to an authorization bypass due to missing verification of user permissions. An authenticated attacker with author-level access or above can forge the newsletters_mailinglistsroles POST field during a norm...

CVE-2026-77143

creationtimestamp| type| source ---|---|--- 2026-08-25 09:34:22+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtvjbfcwp22s...

CVE-2026-78563

creationtimestamp| type| source ---|---|--- 2026-08-25 09:31:54+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtvj4upyrf2a 2026-08-25 12:01:23+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mtvric23xy2y 2026-08-25 12:01:25+00:00| seen|...

CVE-2026-78264

creationtimestamp| type| source ---|---|--- 2026-08-25 09:15:56+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtviagth6v22 2026-08-25 14:04:06+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mtvydptuwn2i 2026-08-25 14:04:07+00:00| seen|...

CVE-2026-66882

creationtimestamp| type| source ---|---|--- 2026-08-25 09:14:39+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtvi65yggp2t...

CVE-2026-77140

TYPO3 extension Telephone Directory (telephonedirectory) suffers from a Broken Access Control flaw. The extension validates the HMAC of a frontend employee edit link only in the action that renders the edit form, but not in the action that persists the change. As a result, an unauthenticated visi...

WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - SQL Injection vulnerability

WordPress ACPT Pro - Custom Post Types Plugin for WordPress plugin = 2.0.63 - SQL Injection vulnerability discovered by VDsec in WordPress Plugin ACPT Pro - Custom Post Types Plugin for WordPress versions = 2.0.63...