40379 matches found
CVE-2026-48828
creationtimestamp| type| source ---|---|--- 2026-07-07 11:34:37+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mq2j5dmjes2x 2026-07-07 12:16:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq2li2o6vg2w...
CVE-2026-11610
creationtimestamp| type| source ---|---|--- 2026-07-07 11:27:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq2ipuz5va24 2026-07-08 01:23:42+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116881740056582551...
CVE-2026-57869
creationtimestamp| type| source ---|---|--- 2026-07-07 08:34:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq272f5jnd2y...
CVE-2026-12943
creationtimestamp| type| source ---|---|--- 2026-07-07 08:30:22+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mq26ttl6ou2f 2026-07-30 19:02:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrv4ungbww2y 2026-07-30 19:02:13+00:00| seen|...
CVE-2026-8306
creationtimestamp| type| source ---|---|--- 2026-07-07 08:14:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq25wlek3u2w...
CVE-2026-14345
The WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.12.7 via the 'postData' parameter parameter. This is due to unsanitized write of attacker-controlled postData values...
EUVD-2026-42009
The WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.12.7 via the 'postData' parameter parameter. This is due to unsanitized write of attacker-controlled postData values...
CVE-2026-14345
The WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.12.7 via the 'postData' parameter parameter. This is due to unsanitized write of attacker-controlled postData values...
CVE-2026-14345
The CVE-2026-14345 entry concerns the WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell (WordPress plugin). Affected versions up to and including 3.12.7 are vulnerable to Remote Code Execution via the postData parameter. The root cause is an unsanitized write of attacker...
CVE-2026-11328
creationtimestamp| type| source ---|---|--- 2026-07-07 04:51:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzsm2qgcy2y 2026-07-07 13:16:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mq2osqsegt2p 2026-07-07 13:22:18+00:00| seen|...
CVE-2026-42143
creationtimestamp| type| source ---|---|--- 2026-07-07 04:06:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzq464xi72a 2026-07-07 06:01:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpzwje4owm2u...
CVE-2026-34058
creationtimestamp| type| source ---|---|--- 2026-07-07 03:54:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzph3hggc24...
CVE-2026-42172
creationtimestamp| type| source ---|---|--- 2026-07-07 03:51:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzpbkmwrd2a...
CVE-2026-34152
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, pre-deployment and post-deployment commands are single-quote escaped but then sent through SSH heredoc transport that preserves newlines, allowing an authenticated user to...
CVE-2026-34152
Coolify (open-source server/app/database manager) has a command injection vulnerability in pre/post deployment handling. Before 4.0.0-beta.471, pre/post deployment commands are single-quote escaped but sent via SSH heredoc transport that preserves newlines, enabling an authenticated user to injec...
CVE-2026-34152 Coolify: Command Injection via Newline in Pre/Post Deployment Commands (Heredoc Transport)
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, pre-deployment and post-deployment commands are single-quote escaped but then sent through SSH heredoc transport that preserves newlines, allowing an authenticated user to...
CVE-2026-11328
The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post title parameter in all versions up to, and including, 2.7.9.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
GHSA-4HF7-XXXW-64RM
creationtimestamp| type| source ---|---|--- 2026-07-07 02:04:20+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpzjbl2rdb22...
CVE-2026-11328 Exclusive Addons for Elementor <= 2.7.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title
The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post title parameter in all versions up to, and including, 2.7.9.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
EUVD-2026-41975
The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post title parameter in all versions up to, and including, 2.7.9.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...