CVE-2025-10656

creationtimestamp| type| source ---|---|--- 2026-07-29 11:26:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrrswcniuq2i...

CVE-2026-58152

creationtimestamp| type| source ---|---|--- 2026-07-29 11:11:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrrs3j7ogu2q...

Security update for java-17-openjdk

This update for java-17-openjdk fixes the following issues: Upgrade to upstream tag jdk-17.0.20+8 July 2026 CPU. Security issues fixed: CVE-2026-41254: lcms: information disclosure and denial of service via integer overflow in CubeSize bsc1264994. CVE-2026-46917: unauthenticated attacker with...

CVE-2026-58154

creationtimestamp| type| source ---|---|--- 2026-07-29 10:08:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrrokt44tz2r 2026-07-29 11:28:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrrt2y3gqf27 2026-07-30 16:34:04+00:00| seen|...

CVE-2026-14488

CVE-2026-14488 affects the Meta Box AIO WordPress plugin (MB Frontend Submission extension) up to version 3.8.0. The vulnerability stems from handle_request() routing the mbfs_delete action without capability/ownership checks, and nonce verification in check_ajax() being gated behind is_ajax(), w...

CVE-2026-12476

creationtimestamp| type| source ---|---|--- 2026-07-29 08:15:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-12476 2026-07-29 08:58:04+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrrknneyy22y...

CVE-2026-57834

creationtimestamp| type| source ---|---|--- 2026-07-29 07:54:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrrh37gmr52j...

CVE-2026-41920

creationtimestamp| type| source ---|---|--- 2026-07-29 07:52:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrrgxmrz3r2k...

CVE-2026-23904

creationtimestamp| type| source ---|---|--- 2026-07-29 07:32:53+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrrfvdl5p62d 2026-07-29 10:42:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrrqjajyro2b...

CVE-2026-63231

A post-authentication SQL injection vulnerability in Koollab LMS allowed an authenticated attacker to use an error-based SQL oracle via the face-to-face runs update endpoint to read the entire application database and obtain valid JWT tokens for account takeover...

CVE-2026-63229

creationtimestamp| type| source ---|---|--- 2026-07-29 06:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrrditf3gc2a...

CVE-2026-63231

Koollab LMS contains a post-authentication SQL injection in the face-to-face runs update endpoint. An authenticated attacker can trigger an error-based SQL condition to read the application database and obtain valid JWT tokens, enabling account takeover. The vulnerability is described across mult...

CVE-2026-63231

A post-authentication SQL injection vulnerability in Koollab LMS allowed an authenticated attacker to use an error-based SQL oracle via the face-to-face runs update endpoint to read the entire application database and obtain valid JWT tokens for account takeover...

CVE-2026-59843

creationtimestamp| type| source ---|---|--- 2026-07-29 04:01:07+00:00| seen| https://bsky.app/profile/slackers.it/post/3mrr22ocw7z2o...

CVE-2026-54621

creationtimestamp| type| source ---|---|--- 2026-07-29 03:25:34+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrqy32ujko2l...

CVE-2026-17162

creationtimestamp| type| source ---|---|--- 2026-07-29 03:14:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqxhyuhth2a...

CVE-2026-12939

The Newsletters Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' attribute of the postthumbnail and newsletterspostthumbnail shortcodes in versions up to and including 4.15. This is due to insufficient input sanitization and output escaping in the postthumbnai...

CVE-2026-54638

creationtimestamp| type| source ---|---|--- 2026-07-29 02:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqtdflp4f2w 2026-07-29 05:32:48+00:00| seen| https://gist.github.com/alon710/7cdf75a52c50aebac3f872ab5cf7bfbf...

CVE-2026-12939

The Newsletters Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' attribute of the postthumbnail and newsletterspostthumbnail shortcodes in versions up to and including 4.15. This is due to insufficient input sanitization and output escaping in the postthumbnai...

CVE-2026-12939 Newsletters <= 4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link' Shortcode Attribute

The Newsletters Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' attribute of the postthumbnail and newsletterspostthumbnail shortcodes in versions up to and including 4.15. This is due to insufficient input sanitization and output escaping in the postthumbnai...