CVE-2026-84292

creationtimestamp| type| source ---|---|--- 2026-09-02 22:59:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mukzzawcjy2s 2026-09-03 01:11:03+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117204442332805731 2026-09-03 01:11:04+00:00| seen|...

CVE-2026-84452

creationtimestamp| type| source ---|---|--- 2026-09-02 22:14:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2bv4axqgwkdl5 2026-09-08 22:35:03+00:00| published-proof-of-concept| https://github.com/microsoft/winml-cli/security/advisories/GHSA-96p9-rh4f-92cf 2026-09-08 22:40:04+00:0...

CVE-2026-12555

creationtimestamp| type| source ---|---|--- 2026-09-02 21:28:09+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mukuv3x3nm2j 2026-09-03 10:54:31+00:00| seen| https://bsky.app/profile/r-netsec.bsky.social/post/3mumbwz6dok26 2026-09-03 14:01:09+00:00| seen|...

CVE-2026-82955

creationtimestamp| type| source ---|---|--- 2026-09-02 19:50:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mukpfsm5ba25...

CVE-2026-84377

creationtimestamp| type| source ---|---|--- 2026-09-02 19:22:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ijcyerl3yj4uq 2026-09-30 22:30:31+00:00| seen| https://gist.github.com/alon710/dea2765728e20846c82f1cf257b88a79...

CVE-2026-51769

creationtimestamp| type| source ---|---|--- 2026-09-02 19:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muknq43khm25...

CVE-2026-51764

creationtimestamp| type| source ---|---|--- 2026-09-02 19:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mukn6asdf72p...

CVE-2026-51757

creationtimestamp| type| source ---|---|--- 2026-09-02 19:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mukmmfkj2h22...

CVE-2026-51750

creationtimestamp| type| source ---|---|--- 2026-09-02 19:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mukmmdz6bs2t...

CVE-2026-19593

creationtimestamp| type| source ---|---|--- 2026-09-02 18:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mukjswn5eg25...

CVE-2026-77124 Nexus Repository 3 - Script Execution Disable Setting Not Enforced

In affected versions of Nexus Repository 3, the script execution endpoint POST /service/rest/v1/script/name/run did not verify whether script execution had been administratively disabled. An account holding script-execution permission could continue to run previously-created scripts even after an...

CVE-2026-51728

creationtimestamp| type| source ---|---|--- 2026-09-02 16:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mukdoajga32w...

CVE-2025-8945

creationtimestamp| type| source ---|---|--- 2026-09-02 16:12:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fed5kuzc5ligr...

Cross-site Scripting (XSS)

Appium is vulnerable to Cross-site Scripting XSS. The vulnerability is due to unsanitized reflection of user-controlled query parameters, POST fields, and HTTP headers into HTML, which allows an attacker to execute arbitrary JavaScript on the server origin...

CVE-2026-82884

The All in One SEO WordPress plugin before 5.0.0.1 does not sanitise and escape some content stored in posts before rendering it back in the post editor, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks that trigger when a higher privilege...

CVE-2026-17563

The User Frontend WordPress plugin before 4.3.11 does not enforce its subscription-purchase requirement when processing frontend post submissions, only when rendering the form, allowing unauthenticated users to create and, depending on the form's configuration, immediately publish posts through...

CVE-2026-80206

creationtimestamp| type| source ---|---|--- 2026-09-02 15:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3muk7lrd2v52x 2026-09-08 22:36:02+00:00| published-proof-of-concept| https://github.com/nltk/nltk/security/advisories/GHSA-w3v8-gmh9-3wv7...

CVE-2026-76642

When an external mount. helper runs but exits with a nonzero status, libmount still treats the helper invocation as successful and runs privileged post-mount hooks. A local unprivileged user with an /etc/fstab entry that uses the user option together with X-mount.idmap or X-mount.owner/group/mode...

EUVD-2026-70045

The All in One SEO WordPress plugin before 5.0.0.1 does not sanitise and escape some content stored in posts before rendering it back in the post editor, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks that trigger when a higher privilege...

EUVD-2026-70035

The User Frontend WordPress plugin before 4.3.11 does not enforce its subscription-purchase requirement when processing frontend post submissions, only when rendering the form, allowing unauthenticated users to create and, depending on the form's configuration, immediately publish posts through...