40035 matches found
EUVD-2026-50096
The Newsletters Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' attribute of the postthumbnail and newsletterspostthumbnail shortcodes in versions up to and including 4.15. This is due to insufficient input sanitization and output escaping in the postthumbnai...
CVE-2026-15735 Contact Form to Any API <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'cf7anyapi_form_field' Post Meta
The Contact Form to Any API plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'cf7anyapiformfield' Post Meta in all versions up to, and including, 3.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
PT-2026-65893
Name of the Vulnerable Software and Affected Versions Flyto2 Core versions prior to 2.26.7 Description The standalone flyto-verification service in src/core/verification service.py exposes an unauthenticated POST '/run' endpoint on 0.0.0.0:8344. The service uses a client-supplied callback url for...
PT-2026-65702
A post-authentication SQL injection vulnerability in Koollab LMS allowed an authenticated attacker to use an error-based SQL oracle via the face-to-face runs update endpoint to read the entire application database and obtain valid JWT tokens for account takeover...
CVE-2026-54658
creationtimestamp| type| source ---|---|--- 2026-07-28 23:54:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrqmavaytp2e 2026-07-29 02:00:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqtdtaeoa2u 2026-07-29 02:50:47+00:00| seen|...
CVE-2026-59921
Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, HttpPostRequestEncoder constructs multipart HTTP request bodies by directly concatenating user-supplied filenames and field names into Content-Disposition MIME headers without...
CVE-2026-14446
creationtimestamp| type| source ---|---|--- 2026-07-28 22:50:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqipfxtf72o 2026-07-28 23:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrqlzqm5id2q 2026-07-30 04:48:06+00:00| seen|...
CVE-2026-54690
creationtimestamp| type| source ---|---|--- 2026-07-28 22:35:16+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-954p-556p-r752 2026-07-28 23:19:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqkdikp762b 2026-07-29 14:31:27+00:00| seen|...
CVE-2026-59921 Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder
Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, HttpPostRequestEncoder constructs multipart HTTP request bodies by directly concatenating user-supplied filenames and field names into Content-Disposition MIME headers without...
CVE-2026-15057
creationtimestamp| type| source ---|---|--- 2026-07-28 22:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqfw4zymw2w...
CVE-2026-50736
creationtimestamp| type| source ---|---|--- 2026-07-28 20:58:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrqcg7k2z22y...
CVE-2026-48372
creationtimestamp| type| source ---|---|--- 2026-07-28 19:42:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrq67cdz3e22...
CVE-2026-16498
creationtimestamp| type| source ---|---|--- 2026-07-28 19:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrq4tetkat23 2026-08-04 14:12:43+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3msb6zqym2e2u 2026-08-05 15:00:06+00:00| seen|...
CVE-2026-51263
creationtimestamp| type| source ---|---|--- 2026-07-28 19:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrq4psk2dz2z 2026-07-29 04:03:07+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mrr26aj6zb2t...
CVE-2026-7769
creationtimestamp| type| source ---|---|--- 2026-07-28 19:00:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrq3tvrsoo2s 2026-07-28 20:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrq7a7yldp2u 2026-08-06 22:07:07+00:00| seen|...
Claude AI Just Cracked a Post-Quantum Test Scheme and Found a Faster 7-Round AES Attack
Anthropic says Claude Mythos Preview helped derive an end-to-end key-recovery attack against HAWK-256 and a 200- to 800-fold speedup for an attack on seven-round AES-128. The HAWK attack exploits a previously unused symmetry in the lattice behind the signature scheme. Anthropic's released...
CVE-2026-48393
creationtimestamp| type| source ---|---|--- 2026-07-28 18:57:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrq3pgddzj2o...
CVE-2026-48391
creationtimestamp| type| source ---|---|--- 2026-07-28 18:55:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrq3lbwx2a27 2026-08-06 23:37:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msh7itwcbg22...