Cliff Stoll’s DEF CON Talk

In August, Cliff Stoll gave a talk at DEF CON, remembering the wily hacker he stalked forty years ago. Great fun...

CVE-2026-73324

creationtimestamp| type| source ---|---|--- 2026-09-11 08:54:11+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mva6x6vu5v2q 2026-09-11 16:37:28+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/117253383601050445 2026-09-11 16:48:32+00:00| seen|...

CVE-2026-89176

creationtimestamp| type| source ---|---|--- 2026-09-11 08:45:23+00:00| seen| https://www.twcert.org.tw/en/cp-139-11200-ffc3c-2.html 2026-09-11 09:51:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6n3dhk4jkjj5m 2026-09-11 11:00:49+00:00| seen|...

CVE-2026-86812

creationtimestamp| type| source ---|---|--- 2026-09-11 08:02:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/bh2haxkbqezmp...

CVE-2026-86815

creationtimestamp| type| source ---|---|--- 2026-09-11 07:56:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5u35zbzf25dxe...

CVE-2026-86782

The Visualizer WordPress plugin before 4.0.6 does not properly authorise access to its chart-building actions, allowing users with the Contributor role and above to publish, rename, and overwrite the content of posts and pages they do not own, including other users' private drafts...

CVE-2026-86782

The Visualizer WordPress plugin (versions 4.0.0-4.0.5 ) is vulnerable to an authorization bypass due to improper access controls on its chart-building actions. This flaw allows users with a Contributor role or higher to perform unauthorized actions, such as publishing, renaming, and overwriting t...

CVE-2026-86782 Visualizer < 4.0.6 - Contributor+ Arbitrary Post/Page Modification via IDOR

The Visualizer WordPress plugin before 4.0.6 does not properly authorise access to its chart-building actions, allowing users with the Contributor role and above to publish, rename, and overwrite the content of posts and pages they do not own, including other users' private drafts...

EUVD-2026-75971

The Visualizer WordPress plugin before 4.0.6 does not properly authorise access to its chart-building actions, allowing users with the Contributor role and above to publish, rename, and overwrite the content of posts and pages they do not own, including other users' private drafts...

WordPress Visualizer plugin 4.0.0-4.0.5 - Contributor+ Arbitrary Post/Page Modification vulnerability

Contributor+ Arbitrary Post/Page Modification vulnerability discovered by Artus KG in WordPress Plugin Visualizer versions 4.0.0-4.0.5...

CVE-2026-86782 Visualizer < 4.0.6 - Contributor+ Arbitrary Post/Page Modification via IDOR

The Visualizer WordPress plugin before 4.0.6 does not properly authorise access to its chart-building actions, allowing users with the Contributor role and above to publish, rename, and overwrite the content of posts and pages they do not own, including other users' private drafts...

CVE-2026-85678

The AI Builder WordPress plugin (versions 2.4.1-2.7.7 ) contains a Stored Cross-Site Scripting (XSS) vulnerability. The root cause is the failure to sanitize custom JavaScript saved against a post before it is echoed inside a script tag on the front end. This allows users with contributor-level a...

CVE-2026-85678 AI Builder 2.4.1 - 2.7.7 - Contributor+ Stored XSS via Post JavaScript

The AI Builder WordPress plugin before 2.7.8 does not sanitise custom JavaScript saved against a post before echoing it inside a script tag on the front end, allowing users with contributor level access and above to store arbitrary JavaScript that will execute in the browser of anyone who views t...

CVE-2026-85678 AI Builder 2.4.1 - 2.7.7 - Contributor+ Stored XSS via Post JavaScript

The AI Builder WordPress plugin before 2.7.8 does not sanitise custom JavaScript saved against a post before echoing it inside a script tag on the front end, allowing users with contributor level access and above to store arbitrary JavaScript that will execute in the browser of anyone who views t...

CVE-2026-64836

creationtimestamp| type| source ---|---|--- 2026-09-11 05:20:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv7syggejg25...

CVE-2026-56711

creationtimestamp| type| source ---|---|--- 2026-09-11 05:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv7syds2f72p 2026-09-11 08:54:11+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mva6x6vu5v2q 2026-09-11 16:37:28+00:00| seen|...

CVE-2026-87812

creationtimestamp| type| source ---|---|--- 2026-09-11 05:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv7sgiqzx525...

CVE-2026-75704

creationtimestamp| type| source ---|---|--- 2026-09-11 05:09:36+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mv7sfmkbun2f...

CVE-2026-89151

creationtimestamp| type| source ---|---|--- 2026-09-11 04:13:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/i3xvqtlbegpim...

CVE-2026-57166

creationtimestamp| type| source ---|---|--- 2026-09-11 03:30:36+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mv7mulx3f32z 2026-09-11 03:30:41+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117250289500372314...