41637 matches found
CVE-2026-76611
creationtimestamp| type| source ---|---|--- 2026-08-21 14:14:42+00:00| seen| https://bsky.app/profile/yootheme.bsky.social/post/3mtlx2yz2rs2p...
CVE-2026-53614
creationtimestamp| type| source ---|---|--- 2026-08-21 13:45:12+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtlvgb5xow2o...
CVE-2026-77759
creationtimestamp| type| source ---|---|--- 2026-08-21 12:21:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3sqovrbovachd...
WordPress SmartCrawl plugin < 3.16.3 - Subscriber+ Private/Draft Post Title Disclosure and Post Meta Key Enumeration vulnerability
Subscriber+ Private/Draft Post Title Disclosure and Post Meta Key Enumeration vulnerability discovered by Ezekiel Victor in WordPress Plugin SmartCrawl versions 3.16.3...
CVE-2026-19435
The Duplicate Post WordPress plugin before 1.5.6 does not check the user's capabilities before returning post data, allowing users with a delegated role to read the content, metadata and passwords of posts they are not allowed to access, including other users' private and draft content...
CVE-2026-19085
The Duplicate Post WordPress plugin before 1.5.6 does not check that a user may read the content of a post before duplicating it, allowing users with a delegated role to republish another user's password-protected post as publicly readable...
EUVD-2026-63822
The Duplicate Post WordPress plugin before 1.5.6 does not check that a user may read the content of a post before duplicating it, allowing users with a delegated role to republish another user's password-protected post as publicly readable...
CVE-2026-19085 Copy & Delete Posts < 1.5.6 - Author+ Password-Protected Post Content Disclosure
The Duplicate Post WordPress plugin before 1.5.6 does not check that a user may read the content of a post before duplicating it, allowing users with a delegated role to republish another user's password-protected post as publicly readable...
CVE-2026-19435
The Duplicate Post WordPress plugin (also titled "Copy & Delete Posts") before 1.5.6 lacks a capability check before returning post data. An authenticated user with a delegated role can read the content, metadata, and passwords of posts they are not authorized to access, including other users' pr...
CVE-2026-19435 Copy & Delete Posts < 1.5.6 - Authenticated Arbitrary Post Content and Password Disclosure
The Duplicate Post WordPress plugin before 1.5.6 does not check the user's capabilities before returning post data, allowing users with a delegated role to read the content, metadata and passwords of posts they are not allowed to access, including other users' private and draft content...
EUVD-2026-63823
The Duplicate Post WordPress plugin before 1.5.6 does not check the user's capabilities before returning post data, allowing users with a delegated role to read the content, metadata and passwords of posts they are not allowed to access, including other users' private and draft content...
CVE-2026-19085
The Duplicate Post WordPress plugin before 1.5.6 lacks an authorization check before duplicating a post. A user with a delegated role can exploit this to republish another user's password-protected post as publicly readable, resulting in a content disclosure. The vulnerability requires high privi...
CVE-2026-76131
creationtimestamp| type| source ---|---|--- 2026-08-21 04:19:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/j3ybqejm7xu3h 2026-08-21 04:45:06+00:00| seen| https://jvn.jp/en/vu/JVNVU90210212...
SUSE CVE-2026-73623
GitPython before 3.1.54 contains an incomplete denylist in unsafegitcloneoptions that omits --template, allowing attackers to achieve arbitrary command execution during clone operations. Attackers can supply --template pointing to a directory containing malicious post-checkout hooks that execute...
PT-2026-79307
The Duplicate Post WordPress plugin before 1.5.6 does not check that a user may read the content of a post before duplicating it, allowing users with a delegated role to republish another user's password-protected post as publicly readable...
CVE-2026-72861 Appwrite Templates github-issue-bot Skips Webhook Signature Verification When the X-Hub-Signature-256 Header Is Absent
The github-issue-bot templates in appwrite/templates verify the GitHub webhook signature with an inverted condition. verifyWebhook in node/github-issue-bot/src/github.js and in node-typescript/github-issue-bot/src/github.ts returns "typeof signature !== 'string' || await verify...", so when the...
CVE-2026-73197
A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the /ipa/migration/migration.py endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increas...
CVE-2026-73197 Ipa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body read
A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the /ipa/migration/migration.py endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increas...
EUVD-2026-63240
A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the /ipa/migration/migration.py endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increas...
CVE-2026-73197
A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the /ipa/migration/migration.py endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increas...