50175 matches found
CVE-2026-87016
creationtimestamp| type| source ---|---|--- 2026-09-09 23:01:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv4ndzoauy24 2026-09-10 22:35:05+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-wpmr-8h3q-fwj7 2026-09-16...
CVE-2026-87995
creationtimestamp| type| source ---|---|--- 2026-09-09 23:01:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv4ndlgnru22 2026-09-10 16:35:12+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-jmc6-2wr8-h3wj 2026-09-17...
CVE-2026-68484
creationtimestamp| type| source ---|---|--- 2026-09-09 22:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv4mq2hgmx2p...
CVE-2026-61907
creationtimestamp| type| source ---|---|--- 2026-09-09 19:40:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/64kwekmjcusjz...
CVE-2026-22590
creationtimestamp| type| source ---|---|--- 2026-09-09 18:04:35+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3mv44rkfwjm2w 2026-09-09 22:40:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv4m67g7dc2y...
Malicious code in matrixkit-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51238ce279c2ff37d32c5edd8a9cb480f1a304720cb67e5acf3ee50e91c773c4 The package advertises itself as a dense-matrix math library but its main entry matrix.js has been modified post-build to require'./src/init' and...
MAL-2026-16095 Malicious code in matrixkit-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51238ce279c2ff37d32c5edd8a9cb480f1a304720cb67e5acf3ee50e91c773c4 The package advertises itself as a dense-matrix math library but its main entry matrix.js has been modified post-build to require'./src/init' and...
Use After Free
Overview Affected versions of this package are vulnerable to Use After Free in the setDict, setLongMax, setLevel, and setRefMultipleDDicts methods of its streaming classes. An attacker can corrupt native heap state or crash the JVM by calling these setters on a stream after close, causing them to...
Missing Authorization
Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Missing Authorization in the POST /hardware/history process. An attacker can reassign assets and modify audit logs by submitting a crafted CSV file, potentially compromising...
CVE-2026-80117
creationtimestamp| type| source ---|---|--- 2026-09-09 15:00:02+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mv3shkbndg2c 2026-09-09 15:00:03+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117241675871290048...
WordPress Builderall for WordPress plugin <= 3.0.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification vulnerability
Missing Authorization to Authenticated Subscriber+ Arbitrary Post Meta Modification vulnerability discovered by Wordfence PRISM in WordPress Plugin Builderall Builder for WordPress versions = 3.0.2...
CVE-2026-87877 zstd-jni 1.3.8-4 through 1.5.7-13 Use-After-Free via Setters Called After close()
zstd-jni versions before 1.5.7-14 fail to validate closed state in setDict, setLongMax, setLevel and setRefMultipleDDicts methods of stream classes. Attackers can call these methods on closed streams to write through freed native pointers, corrupting unrelated objects or crashing the JVM...
CVE-2026-84222
The Kirki WordPress plugin before 6.3.0 does not check whether the requester is allowed to read a post before rendering and returning its page content, allowing unauthenticated users to retrieve the content of pages that are not publicly available, such as private, draft, pending and trashed ones...
CVE-2026-21102
creationtimestamp| type| source ---|---|--- 2026-09-09 06:07:31+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv2updojsh2y 2026-09-09 18:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv45na5c5i22 2026-09-11 03:37:06+00:00| seen|...
EUVD-2026-74716
The Kirki WordPress plugin before 6.3.0 does not check whether the requester is allowed to read a post before rendering and returning its page content, allowing unauthenticated users to retrieve the content of pages that are not publicly available, such as private, draft, pending and trashed ones...
WordPress Kirki plugin 6.2.1-6.2.5 - Unauthenticated Non-Public Post Content Disclosure vulnerability
Unauthenticated Non-Public Post Content Disclosure vulnerability discovered by Mohammed Abd Alrahman in WordPress Plugin Kirki versions 6.2.1-6.2.5...
CVE-2025-15690
The Content Mask WordPress plugin (versions 1.7.1-1.8.5.5 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The flaw exists because the plugin fails to properly sanitise and escape content submitted via a post before it is outputted in generated pages. This allows users with a role as low as...
CVE-2025-15690 Content Mask 1.7.1 - 1.8.5.5 - Contributor+ Stored XSS via Post Scripts and Styles
The Content Mask WordPress plugin before 1.8.5.6 does not properly sanitise and escape content submitted with a post before outputting it in the pages it generates, allowing users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks against any user viewing or previewi...
CVE-2025-15690 Content Mask 1.7.1 - 1.8.5.5 - Contributor+ Stored XSS via Post Scripts and Styles
The Content Mask WordPress plugin before 1.8.5.6 does not properly sanitise and escape content submitted with a post before outputting it in the pages it generates, allowing users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks against any user viewing or previewi...
EUVD-2026-74691
The WP Recipe Maker plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 10.8.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with contributor-level...