50055 matches found
CVE-2026-84386
creationtimestamp| type| source ---|---|--- 2026-09-11 13:55:10+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvaprcwds62r...
Cliff Stoll’s DEF CON Talk
In August, Cliff Stoll gave a talk at DEF CON, remembering the wily hacker he stalked forty years ago. Great fun...
CVE-2026-73324
creationtimestamp| type| source ---|---|--- 2026-09-11 08:54:11+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mva6x6vu5v2q 2026-09-11 16:37:28+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/117253383601050445 2026-09-11 16:48:32+00:00| seen|...
CVE-2026-89176
creationtimestamp| type| source ---|---|--- 2026-09-11 08:45:23+00:00| seen| https://www.twcert.org.tw/en/cp-139-11200-ffc3c-2.html 2026-09-11 09:51:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6n3dhk4jkjj5m 2026-09-11 11:00:49+00:00| seen|...
CVE-2026-86812
creationtimestamp| type| source ---|---|--- 2026-09-11 08:02:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/bh2haxkbqezmp...
CVE-2026-86815
creationtimestamp| type| source ---|---|--- 2026-09-11 07:56:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5u35zbzf25dxe...
CVE-2026-86782
The Visualizer WordPress plugin before 4.0.6 does not properly authorise access to its chart-building actions, allowing users with the Contributor role and above to publish, rename, and overwrite the content of posts and pages they do not own, including other users' private drafts...
WordPress Visualizer plugin 4.0.0-4.0.5 - Contributor+ Arbitrary Post/Page Modification vulnerability
Contributor+ Arbitrary Post/Page Modification vulnerability discovered by Artus KG in WordPress Plugin Visualizer versions 4.0.0-4.0.5...
CVE-2026-86782
The Visualizer WordPress plugin (versions 4.0.0-4.0.5 ) is vulnerable to an authorization bypass due to improper access controls on its chart-building actions. This flaw allows users with a Contributor role or higher to perform unauthorized actions, such as publishing, renaming, and overwriting t...
CVE-2026-86782 Visualizer < 4.0.6 - Contributor+ Arbitrary Post/Page Modification via IDOR
The Visualizer WordPress plugin before 4.0.6 does not properly authorise access to its chart-building actions, allowing users with the Contributor role and above to publish, rename, and overwrite the content of posts and pages they do not own, including other users' private drafts...
EUVD-2026-75971
The Visualizer WordPress plugin before 4.0.6 does not properly authorise access to its chart-building actions, allowing users with the Contributor role and above to publish, rename, and overwrite the content of posts and pages they do not own, including other users' private drafts...
CVE-2026-86782 Visualizer < 4.0.6 - Contributor+ Arbitrary Post/Page Modification via IDOR
The Visualizer WordPress plugin before 4.0.6 does not properly authorise access to its chart-building actions, allowing users with the Contributor role and above to publish, rename, and overwrite the content of posts and pages they do not own, including other users' private drafts...
CVE-2026-85678
The AI Builder WordPress plugin (versions 2.4.1-2.7.7 ) contains a Stored Cross-Site Scripting (XSS) vulnerability. The root cause is the failure to sanitize custom JavaScript saved against a post before it is echoed inside a script tag on the front end. This allows users with contributor-level a...
CVE-2026-85678 AI Builder 2.4.1 - 2.7.7 - Contributor+ Stored XSS via Post JavaScript
The AI Builder WordPress plugin before 2.7.8 does not sanitise custom JavaScript saved against a post before echoing it inside a script tag on the front end, allowing users with contributor level access and above to store arbitrary JavaScript that will execute in the browser of anyone who views t...
CVE-2026-85678 AI Builder 2.4.1 - 2.7.7 - Contributor+ Stored XSS via Post JavaScript
The AI Builder WordPress plugin before 2.7.8 does not sanitise custom JavaScript saved against a post before echoing it inside a script tag on the front end, allowing users with contributor level access and above to store arbitrary JavaScript that will execute in the browser of anyone who views t...
CVE-2026-64836
creationtimestamp| type| source ---|---|--- 2026-09-11 05:20:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv7syggejg25...
CVE-2026-56711
creationtimestamp| type| source ---|---|--- 2026-09-11 05:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv7syds2f72p 2026-09-11 08:54:11+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mva6x6vu5v2q 2026-09-11 16:37:28+00:00| seen|...
CVE-2026-87812
creationtimestamp| type| source ---|---|--- 2026-09-11 05:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv7sgiqzx525...