40021 matches found
EUVD-2026-52589
The Nested Pages WordPress plugin before 3.2.15 does not properly escape post titles before outputting them into HTML attributes on an administrative listing screen, allowing users with the Editor role or Contributor/Author when the Nested Pages WordPress plugin before 3.2.15 is enabled for the...
CVE-2026-15233
The CVE describes a stored XSS vulnerability in the Nested Pages WordPress plugin prior to 3.2.15. Specifically, post titles are not properly escaped when output in HTML attributes on an administrative listing screen, enabling users with Editor (or Contributor/Author when the plugin is enabled fo...
CVE-2026-18719
creationtimestamp| type| source ---|---|--- 2026-08-04 04:12:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/bhk7ad4rhbx7r...
CVE-2026-69096
creationtimestamp| type| source ---|---|--- 2026-08-04 04:05:00+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3msa533lecw2m...
EUVD-2026-52566
A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel WAX650S firmware versions through 7.10ABRM.4C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected device...
CVE-2026-6837
A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel WAX650S firmware versions through 7.10ABRM.4C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected device...
CVE-2026-68981
creationtimestamp| type| source ---|---|--- 2026-08-04 01:52:04+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3ms7vng7zoz24 2026-08-06 11:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msfvlqyojt2q...
CVE-2026-69095
creationtimestamp| type| source ---|---|--- 2026-08-04 00:01:21+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3ms7phgudky2g...
PT-2026-67633
A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel WAX650S firmware versions through 7.10ABRM.4C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected device...
CVE-2025-15673
creationtimestamp| type| source ---|---|--- 2026-08-03 23:34:48+00:00| seen| https://bsky.app/profile/cvemon.bsky.social/post/3ms7nxyas4w2m...
CVE-2026-18684
creationtimestamp| type| source ---|---|--- 2026-08-03 23:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms7mazaa2b2p 2026-08-04 03:00:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/117035003364698464 2026-08-04 03:00:32+00:00| seen|...
CVE-2026-48333
creationtimestamp| type| source ---|---|--- 2026-08-03 23:02:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms7m5hjbyy2u 2026-08-04 06:00:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117035710843679491 2026-08-04 06:00:27+00:00| seen|...
CVE-2026-48331
creationtimestamp| type| source ---|---|--- 2026-08-03 23:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms7lzvvkyb2p 2026-08-04 02:22:22+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3ms7xdm562k2s 2026-08-04 02:50:19+00:00| seen|...
CVE-2026-48330
creationtimestamp| type| source ---|---|--- 2026-08-03 22:58:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms7lwd2mby2u 2026-08-04 00:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms7pgf3mdc2x 2026-08-06 16:16:07+00:00| seen|...
ctf-writeups
🏴 CTF Writeups & PoC Collection Documented solutions from Hac...
CVE-2026-48326
creationtimestamp| type| source ---|---|--- 2026-08-03 22:58:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms7lwbt4qi2o 2026-08-04 00:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms7pg6e2tw2p 2026-08-04 17:10:53+00:00| seen|...
CVE-2026-18667
creationtimestamp| type| source ---|---|--- 2026-08-03 22:56:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms7lsrh6kl2h...
CVE-2026-46713
creationtimestamp| type| source ---|---|--- 2026-08-03 22:56:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms7lsq36if2b...
CVE-2026-18641
creationtimestamp| type| source ---|---|--- 2026-08-03 22:15:12+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3ms7jjnkh3h24...
CVE-2026-48113
The CVE-2026-48113 entry concerns Chisel, a TCP/UDP tunnel over SSH, where ACL restrictions provided by --authfile are bypassed on post-handshake SSH channels. Authenticated clients can open channels to arbitrary host:port destinations reachable from the server because ACL checks are performed on...