40400 matches found
PT-2026-50086
Name of the Vulnerable Software and Affected Versions ACPT Pro - Custom Post Types Plugin for WordPress versions prior to 2.0.48 Description Improper Control of Generation of Code allows for Remote Code Inclusion and unauthenticated Remote Code Execution RCE. This issue enables an attacker to...
PT-2026-50153
Name of the Vulnerable Software and Affected Versions Deno versions prior to 2.8.1 Description When the fetch function is called, the runtime validates the destination hostname against --deny-net rules but fails to re-verify the IP addresses that the hostname resolves to. This allows an...
CVE-2026-48714
creationtimestamp| type| source ---|---|--- 2026-06-15 23:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moef7y4spa2t 2026-06-16 00:33:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moekfhn56c2n 2026-06-16 01:30:27+00:00| seen|...
CVE-2026-11850
creationtimestamp| type| source ---|---|--- 2026-06-15 22:40:51+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3moee4eyg372o 2026-07-21 12:01:10+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mr5r5pjbkd2z 2026-07-29 12:01:42+00:00| seen|...
CVE-2026-11832
creationtimestamp| type| source ---|---|--- 2026-06-15 22:14:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3moecmi2a4n2q 2026-06-15 23:57:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moeiet2rl42p 2026-06-17 07:00:40+00:00| seen|...
CVE-2026-52703
creationtimestamp| type| source ---|---|--- 2026-06-15 22:12:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moeckkecr52j 2026-06-15 23:01:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moefb56g4m2n 2026-06-16 04:30:28+00:00| seen|...
CVE-2026-52694
creationtimestamp| type| source ---|---|--- 2026-06-15 22:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moebumcksd2i...
CVE-2026-9691
creationtimestamp| type| source ---|---|--- 2026-06-15 22:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moebufj5dv2n 2026-06-15 23:55:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moeibhgxeo2f 2026-07-13 22:00:41+00:00| seen|...
CVE-2026-49768
creationtimestamp| type| source ---|---|--- 2026-06-15 21:48:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moeb5qmalx2p 2026-06-15 23:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3moeg3ilcz52k 2026-06-16 06:00:36+00:00| seen|...
CVE-2026-49780
creationtimestamp| type| source ---|---|--- 2026-06-15 21:33:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moeadytsfx2a 2026-06-16 03:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moesmvn3m22n 2026-06-22 20:16:07+00:00| seen|...
EUVD-2026-36937
Contributor PHP Object Injection in Post Duplicator = 3.0.10 versions...
EUVD-2026-36784
Incorrect access control in the webhook management component of Project Firefly III v6.5.9 allows attackers to scan internal resources via a crafted POST request...
EUVD-2026-36777
An issue in the uploadPostHandler component of Andrei Marcu linx-server v2.3.8 allows attackers to cause a Denial of Service DoS via a crafted POST request...
CVE-2026-48838
Unauthenticated Cross Site Scripting XSS in Post SMTP = 3.6.2 versions...
CVE-2026-39474
Contributor PHP Object Injection in Post Duplicator = 3.0.10 versions...
CVE-2026-48017
DbGate is cross-platform database manager. In versions 7.1.8 and prior, the POST /runners/load-reader endpoint in DbGate accepts a functionName parameter that is directly interpolated into a JavaScript code template without any sanitization or validation. An authenticated user with basic access, ...
CVE-2026-52719
creationtimestamp| type| source ---|---|--- 2026-06-15 20:26:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moe4m3klva2b...
CVE-2026-48838 WordPress Post SMTP plugin <= 3.6.2 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Post SMTP = 3.6.2 versions...
