49994 matches found
CVE-2026-89151
creationtimestamp| type| source ---|---|--- 2026-09-11 04:13:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/i3xvqtlbegpim...
CVE-2026-57166
creationtimestamp| type| source ---|---|--- 2026-09-11 03:30:36+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mv7mulx3f32z 2026-09-11 03:30:41+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117250289500372314...
PT-2026-89848
WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in playlistRemove.php that allows attackers to delete playlists by skipping CSRF protection checks. Attackers can craft a malicious form that submits a POST request to...
BadEngram: Backdoor Attack on Gated Memory Components in LLMs
To expand open-weight models' capacity without proportionally increasing computation, recent language models incorporate gated parametric memories that retrieve learned values and inject them into intermediate representations. Despite these efficiency benefits, such modules create a distinct atta...
CVE-2026-11446: Missing Authorization
The Booktics – Booking Calendar for Appointments and Service Businesses plugin for WordPress is vulnerable to unauthorized modification of data in all versions up to, and including, 1.0.23. This is due to the createorderpermission permission callback on the POST /wp-json/booktics/v1/orders REST...
CVE-2026-89251: Insufficient Verification of Data Authenticity
AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate ad impressions in plugin/ADServer/log.php, allowing logged-in users to submit arbitrary label values that trigger unverified wallet credits to campaign video owners. Attackers can repeatedly POST label=start requests...
CVE-2026-89264: Authorization Bypass Through User-Controlled Key
MoguBlog through 6.2 fails to validate the comment author identity in the POST /web/comment/add endpoint, allowing authenticated users to post comments attributed to any other user. Attackers can supply arbitrary userUid values in the request body to impersonate other accounts including...
CVE-2026-50018: Uncontrolled Resource Consumption
Hoverfly is an open source API simulation tool. Prior to version 1.12.8, remote post-serve actions use http.DefaultClient without any timeout configuration. When the remote endpoint is unreachable or intentionally slow accepts TCP connection but never responds, each triggered proxy request spawns...
RedAmon 6.14.1
An autonomous AI framework that chains reconnaissance, exploitation, and post-exploitation into a single pipeline, then goes further by triaging every finding, implementing code fixes, and opening pull requests on your repository. From first packet to merged patch, with human oversight at every...
CVE-2026-89265: Missing Authorization
MoguBlog through 6.2 contains an authorization bypass vulnerability in the POST /pictureSort/getPictureSortByUid endpoint, which omits the @AuthorityVerify annotation required to enforce role-based permissions. Authenticated back-office users without image-category permissions can supply a catego...
CVE-2026-18994
creationtimestamp| type| source ---|---|--- 2026-09-10 23:05:26+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mv762hoxt62b...
CVE-2026-11813
creationtimestamp| type| source ---|---|--- 2026-09-10 23:04:43+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mv75z5ono52o...
CVE-2026-84889
creationtimestamp| type| source ---|---|--- 2026-09-10 23:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv75ryhdtm2b 2026-09-15 07:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvk4j3crjs2y...
CVE-2026-75777
creationtimestamp| type| source ---|---|--- 2026-09-10 22:52:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6px52ukanfy7v...
CVE-2026-82079
creationtimestamp| type| source ---|---|--- 2026-09-10 21:21:17+00:00| seen| https://bsky.app/profile/sundhaug.com/post/3mv6ya5sqyk2g 2026-09-14 13:11:44+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mvi6qiv44c2y 2026-09-16 13:29:14+00:00| seen|...
CVE-2026-75713
creationtimestamp| type| source ---|---|--- 2026-09-10 21:19:04+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mv6y4aovaz2c...
CVE-2026-75694
creationtimestamp| type| source ---|---|--- 2026-09-10 21:19:01+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mv6y45n7pr2w...
CVE-2026-75742
creationtimestamp| type| source ---|---|--- 2026-09-10 21:18:58+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mv6y42nfdx2z...