CVE-2026-10735

creationtimestamp| type| source ---|---|--- 2026-06-19 07:16:13+00:00| seen| https://bsky.app/profile/ahmandonk.bsky.social/post/3momscoqoae2v 2026-07-13 13:00:07+00:00| seen| https://t.me/truesecator/8322 2026-07-14 00:00:43+00:00| exploited| https://t.me/truesecator/8322...

CVE-2026-9013

The Bogo plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.9.1 via the bogorestcreateposttranslation. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract the raw title, content, excerpt,...

CVE-2026-9013

The Bogo plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.9.1 via the bogorestcreateposttranslation. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract the raw title, content, excerpt,...

EUVD-2026-37983

The Bogo plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.9.1 via the bogorestcreateposttranslation. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract the raw title, content, excerpt,...

Malicious code in ts-linter-builders (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a22153f1e71ba9fb51ce22d5fc57180ce4d8998995fbc4bd554d6dd532c195b6 index.js imports childprocess and contains a hardcoded outbound POST to https://tg-wallet-manager.vercel.app, with additional fetch calls to the same...

CVE-2026-49252

creationtimestamp| type| source ---|---|--- 2026-06-19 03:00:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116774537156468830 2026-06-19 03:00:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3momdzivs6c26 2026-06-19 09:01:31+00:00| seen|...

CVE-2026-53488

creationtimestamp| type| source ---|---|--- 2026-06-19 01:31:49+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mom72udh7u25 2026-06-22 13:09:18+00:00| seen| https://bsky.app/profile/mfahlandt.bsky.social/post/3mouxgsffum2z 2026-07-01 02:00:09+00:00| seen|...

CVE-2026-50195

creationtimestamp| type| source ---|---|--- 2026-06-19 01:31:49+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mom72udh7u25 2026-06-19 09:11:46+00:00| seen| https://bsky.app/profile/canartuc.com/post/3momyrcpuo42y 2026-06-19 10:03:46+00:00| seen|...

CVE-2026-8100

creationtimestamp| type| source ---|---|--- 2026-06-19 01:14:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mom636yl5f2e...

PT-2026-50847

Name of the Vulnerable Software and Affected Versions Bogo plugin for WordPress versions prior to 3.9.2 Description An issue exists where authenticated attackers with subscriber-level access and above can extract the raw title, content, excerpt, and password of private, draft, or password-protect...

PT-2026-50987

Name of the Vulnerable Software and Affected Versions J-ClassifiedsManager version 3.0.5 Description An SQL injection allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through POST parameters. By submitting crafted payloads to the 'displayads' component...

CVE-2026-46699

creationtimestamp| type| source ---|---|--- 2026-06-18 21:48:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3molslvpsga27...

CVE-2026-49257

creationtimestamp| type| source ---|---|--- 2026-06-18 21:30:16+00:00| seen| https://infosec.exchange/users/offseq/statuses/116773238347097877 2026-06-18 21:30:40+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3molrkuu26z27 2026-06-18 22:03:44+00:00| seen|...

CVE-2026-53437

A flaw was found in Jenkins. This vulnerability allows a remote attacker to perform phishing attacks by crafting a malicious redirect URL. The flaw occurs because Jenkins improperly validates redirect URLs after login, specifically when tab or newline characters are present between the // in the...

CVE-2026-54104

creationtimestamp| type| source ---|---|--- 2026-06-18 18:05:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3molg436wlg2g...

CVE-2026-56022

creationtimestamp| type| source ---|---|--- 2026-06-18 18:02:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3molfwp2j422x 2026-06-19 17:28:37+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116777950593769356...

CVE-2026-56020

creationtimestamp| type| source ---|---|--- 2026-06-18 17:59:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3molfrsjyox23 2026-07-16 19:51:58+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mqrz4walds2m...

CVE-2025-32436

creationtimestamp| type| source ---|---|--- 2026-06-18 17:54:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3molfj6oi6x2s...

CVE-2026-56021

creationtimestamp| type| source ---|---|--- 2026-06-18 17:50:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3molfbqstbi2a...

CVE-2026-40455

An SQL Injection vulnerability exists in LMS LAN Management System before commit 4cb30a7 within the "tarifflist.php" module due to insufficient sanitization of the POST "tg" parameter. The application directly concatenates user-supplied array values into an SQL query using "implode", allowing...