CVE-2026-84377

creationtimestamp| type| source ---|---|--- 2026-09-02 19:22:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ijcyerl3yj4uq 2026-09-30 22:30:31+00:00| seen| https://gist.github.com/alon710/dea2765728e20846c82f1cf257b88a79...

CVE-2026-51769

creationtimestamp| type| source ---|---|--- 2026-09-02 19:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muknq43khm25...

CVE-2026-51764

creationtimestamp| type| source ---|---|--- 2026-09-02 19:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mukn6asdf72p...

CVE-2026-51757

creationtimestamp| type| source ---|---|--- 2026-09-02 19:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mukmmfkj2h22...

CVE-2026-51750

creationtimestamp| type| source ---|---|--- 2026-09-02 19:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mukmmdz6bs2t...

CVE-2026-19593

creationtimestamp| type| source ---|---|--- 2026-09-02 18:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mukjswn5eg25...

CVE-2026-77124 Nexus Repository 3 - Script Execution Disable Setting Not Enforced

In affected versions of Nexus Repository 3, the script execution endpoint POST /service/rest/v1/script/name/run did not verify whether script execution had been administratively disabled. An account holding script-execution permission could continue to run previously-created scripts even after an...

CVE-2026-51728

creationtimestamp| type| source ---|---|--- 2026-09-02 16:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mukdoajga32w...

CVE-2025-8945

creationtimestamp| type| source ---|---|--- 2026-09-02 16:12:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fed5kuzc5ligr...

Cross-site Scripting (XSS)

Appium is vulnerable to Cross-site Scripting XSS. The vulnerability is due to unsanitized reflection of user-controlled query parameters, POST fields, and HTTP headers into HTML, which allows an attacker to execute arbitrary JavaScript on the server origin...

CVE-2026-82884

The All in One SEO WordPress plugin before 5.0.0.1 does not sanitise and escape some content stored in posts before rendering it back in the post editor, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks that trigger when a higher privilege...

CVE-2026-17563

The User Frontend WordPress plugin before 4.3.11 does not enforce its subscription-purchase requirement when processing frontend post submissions, only when rendering the form, allowing unauthenticated users to create and, depending on the form's configuration, immediately publish posts through...

CVE-2026-80206

creationtimestamp| type| source ---|---|--- 2026-09-02 15:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3muk7lrd2v52x 2026-09-08 22:36:02+00:00| published-proof-of-concept| https://github.com/nltk/nltk/security/advisories/GHSA-w3v8-gmh9-3wv7...

CVE-2026-76642

When an external mount. helper runs but exits with a nonzero status, libmount still treats the helper invocation as successful and runs privileged post-mount hooks. A local unprivileged user with an /etc/fstab entry that uses the user option together with X-mount.idmap or X-mount.owner/group/mode...

EUVD-2026-70045

The All in One SEO WordPress plugin before 5.0.0.1 does not sanitise and escape some content stored in posts before rendering it back in the post editor, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks that trigger when a higher privilege...

EUVD-2026-70035

The User Frontend WordPress plugin before 4.3.11 does not enforce its subscription-purchase requirement when processing frontend post submissions, only when rendering the form, allowing unauthenticated users to create and, depending on the form's configuration, immediately publish posts through...

CVE-2026-17563 WP User Frontend < 4.3.11 - Unauthenticated Post Creation via Subscription-Gated Form

The User Frontend WordPress plugin before 4.3.11 does not enforce its subscription-purchase requirement when processing frontend post submissions, only when rendering the form, allowing unauthenticated users to create and, depending on the form's configuration, immediately publish posts through...

CVE-2026-17563 WP User Frontend < 4.3.11 - Unauthenticated Post Creation via Subscription-Gated Form

The User Frontend WordPress plugin before 4.3.11 does not enforce its subscription-purchase requirement when processing frontend post submissions, only when rendering the form, allowing unauthenticated users to create and, depending on the form's configuration, immediately publish posts through...

CVE-2026-17563

User Frontend WordPress plugin (versions before 4.3.11 ) enforces its subscription-purchase requirement only when rendering a frontend form, not when processing the actual post submission. This allows unauthenticated users to create—and, depending on form configuration, immediately publish —posts...

CVE-2026-81286

creationtimestamp| type| source ---|---|--- 2026-09-02 14:07:06+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muk4ahvex52t 2026-09-02 18:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mukkeslksq22...