CVE-2026-8500

creationtimestamp| type| source ---|---|--- 2026-05-14 02:36:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlrrunabrp2h...

CVE-2026-44369

creationtimestamp| type| source ---|---|--- 2026-05-14 02:06:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlrq5nn2oh2h...

CVE-2026-44381

creationtimestamp| type| source ---|---|--- 2026-05-14 00:33:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlrkz6rkck2k...

CVE-2026-44377

creationtimestamp| type| source ---|---|--- 2026-05-14 00:23:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlrkhavktp2k...

PT-2026-40850

The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.7.9. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers,...

PT-2026-40896

Name of the Vulnerable Software and Affected Versions MW WP Form versions prior to 5.1.3 Description Insufficient restrictions in the get post property from querystring function allow unauthenticated attackers to extract data from private, draft, or password-protected posts. Recommendations Updat...

JetBrains TeamCity <= 2025.11.4 Privilege Escalation (CVE-2026-44413)

The version of JetBrains TeamCity installed on the remote host is 2025.11.4 or prior. It is, therefore, affected by a post-authentication privilege escalation vulnerability that may allow any authenticated user, including standard or guest accounts, to expose some parts of the TeamCity server API...

Widening the Gap: Exploiting LLM Quantization Via Outlier Injection

LLM quantization has become essential for memory-efficient deployment. Recent work has shown that quantization schemes can pose critical security risks: an adversary may release a model that appears benign in full precision but exhibits malicious behavior once quantized by users. However, existin...

Linux Distros Unpatched Vulnerability : CVE-2026-8336

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - After invoking $internalJsEmit, which is not intended to be directly accessible, or mapreduce command's map function in a certain way, an authenticated user can...

WordPress plugin InfusedWoo Pro 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

WordPress plugin My Calendar – Accessible Event Manager 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

CVE-2026-45229

creationtimestamp| type| source ---|---|--- 2026-05-13 23:53:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlriscywqf2i...

CVE-2026-45055

creationtimestamp| type| source ---|---|--- 2026-05-13 23:50:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlrinfohog2k...

CVE-2026-45033

creationtimestamp| type| source ---|---|--- 2026-05-13 22:13:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlrd7htx5x2n 2026-08-04 10:00:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96567 2026-08-04 17:00:04+00:00| seen|...

CVE-2026-6667

creationtimestamp| type| source ---|---|--- 2026-05-13 21:59:40+00:00| seen| https://bsky.app/profile/intel.overresearched.net/post/3mlrcgdu3ss2c...

CVE-2026-44470

creationtimestamp| type| source ---|---|--- 2026-05-13 21:36:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlrb4qekxf2q...

CVE-2026-44418 Incomplete fix for CVE-2026-35184: SQL Injection in phili67/ecclesiacrm

EcclesiaCRM is CRM Software for church management. In 8.0.0 and earlier, the ValidateInput function's default case in EcclesiaCRM's query view passes user-supplied POST parameters directly into SQL queries via strreplace without any sanitization, enabling SQL injection through query parameters th...

CVE-2026-44418

EcclesiaCRM (8.0.0 and earlier) is affected. The ValidateInput() function’s default case in the query view passes user-supplied POST parameters directly into SQL queries via str_replace without sanitization, enabling SQL injection through query parameters that use non-standard validation types. T...

CVE-2026-44418

EcclesiaCRM is CRM Software for church management. In 8.0.0 and earlier, the ValidateInput function's default case in EcclesiaCRM's query view passes user-supplied POST parameters directly into SQL queries via strreplace without any sanitization, enabling SQL injection through query parameters th...

CVE-2026-44418 Incomplete fix for CVE-2026-35184: SQL Injection in phili67/ecclesiacrm

EcclesiaCRM is CRM Software for church management. In 8.0.0 and earlier, the ValidateInput function's default case in EcclesiaCRM's query view passes user-supplied POST parameters directly into SQL queries via strreplace without any sanitization, enabling SQL injection through query parameters th...