CVE-2026-52694

creationtimestamp| type| source ---|---|--- 2026-06-15 22:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moebumcksd2i...

CVE-2026-9691

creationtimestamp| type| source ---|---|--- 2026-06-15 22:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moebufj5dv2n 2026-06-15 23:55:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moeibhgxeo2f 2026-07-13 22:00:41+00:00| seen|...

CVE-2026-49768

creationtimestamp| type| source ---|---|--- 2026-06-15 21:48:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moeb5qmalx2p 2026-06-15 23:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3moeg3ilcz52k 2026-06-16 06:00:36+00:00| seen|...

CVE-2026-49780

creationtimestamp| type| source ---|---|--- 2026-06-15 21:33:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moeadytsfx2a 2026-06-16 03:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moesmvn3m22n 2026-06-22 20:16:07+00:00| seen|...

EUVD-2026-36937

Contributor PHP Object Injection in Post Duplicator = 3.0.10 versions...

EUVD-2026-36784

Incorrect access control in the webhook management component of Project Firefly III v6.5.9 allows attackers to scan internal resources via a crafted POST request...

EUVD-2026-36777

An issue in the uploadPostHandler component of Andrei Marcu linx-server v2.3.8 allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2026-48838

Unauthenticated Cross Site Scripting XSS in Post SMTP = 3.6.2 versions...

CVE-2026-39474

Contributor PHP Object Injection in Post Duplicator = 3.0.10 versions...

CVE-2026-48017

DbGate is cross-platform database manager. In versions 7.1.8 and prior, the POST /runners/load-reader endpoint in DbGate accepts a functionName parameter that is directly interpolated into a JavaScript code template without any sanitization or validation. An authenticated user with basic access, ...

CVE-2026-52719

creationtimestamp| type| source ---|---|--- 2026-06-15 20:26:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moe4m3klva2b...

CVE-2026-48838 WordPress Post SMTP plugin <= 3.6.2 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Post SMTP = 3.6.2 versions...

EUVD-2026-36845

Unauthenticated Cross Site Scripting XSS in Post SMTP = 3.6.2 versions...

CVE-2026-48838

CVE-2026-48838 covers an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress Post SMTP plugin, versions

CVE-2026-39474 WordPress Post Duplicator plugin <= 3.0.10 - PHP Object Injection vulnerability

Contributor PHP Object Injection in Post Duplicator = 3.0.10 versions...

CVE-2026-39474

The CVE CVE-2026-39474 concerns the WordPress Post Duplicator plugin (versions

CVE-2026-50886

Incorrect access control in the webhook management component of Project Firefly III v6.5.9 allows attackers to scan internal resources via a crafted POST request...

CVE-2026-50882

An issue in the /api/v0/pastes endpoint of anna-is-cute paste v0.1.1 allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2026-54294

creationtimestamp| type| source ---|---|--- 2026-06-15 20:15:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moe3z77vp32w 2026-07-31 18:35:26+00:00| published-proof-of-concept| https://github.com/nltk/nltk/security/advisories/GHSA-6hm5-jgcp-p838...

CVE-2026-54292

creationtimestamp| type| source ---|---|--- 2026-06-15 20:04:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moe3fg4bph2e 2026-07-31 18:35:29+00:00| published-proof-of-concept| https://github.com/nltk/nltk/security/advisories/GHSA-xh95-f55m-82fw...