CVE-2025-52468

creationtimestamp| type| source ---|---|--- 2026-03-02 16:29:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mg3ogey6un2s 2026-03-02 17:57:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg3tcy3iw524 2026-03-03 19:40:10+00:00| seen|...

CVE-2025-52482

creationtimestamp| type| source ---|---|--- 2026-03-02 16:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mg3ms2y2yy2u 2026-03-02 17:43:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg3sk4fr5j27 2026-03-04 07:00:14+00:00| seen|...

CVE-2026-3431

creationtimestamp| type| source ---|---|--- 2026-03-02 13:17:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mg3do2p6kz26 2026-03-02 13:53:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg3fokgmj42u 2026-03-02 15:36:47+00:00| seen|...

LLM-Assisted Deanonymization

Turns out that LLMs are good at de-anonymization: We show that LLM agents can figure out who you are from your anonymous online posts. Across Hacker News, Reddit, LinkedIn, and anonymized interview transcripts, our method identifies users with high precision ­ and scales to tens of thousands of...

CVE-2025-30044

creationtimestamp| type| source ---|---|--- 2026-03-02 10:55:00+00:00| seen| https://cert.pl/en/posts/2026/03/CVE-2025-10350/ 2026-03-02 12:09:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg37ukv4rn2n 2026-03-02 13:08:35+00:00| seen|...

CVE-2026-3411

creationtimestamp| type| source ---|---|--- 2026-03-02 08:03:11+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mg2s4d62gt2s 2026-03-02 08:24:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg2tcwg4ro2e 2026-03-03 23:20:09+00:00| seen|...

CVE-2026-3410

creationtimestamp| type| source ---|---|--- 2026-03-02 08:02:25+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mg2s2xekhp2l 2026-03-02 08:05:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg2safisjc2z 2026-03-04 06:00:17+00:00| seen|...

CVE-2026-2999

creationtimestamp| type| source ---|---|--- 2026-03-02 05:49:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10741-daed4-2.html 2026-03-02 07:22:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mg2ptxicnr2x 2026-03-02 07:23:14+00:00| seen|...

CVE-2026-3000

creationtimestamp| type| source ---|---|--- 2026-03-02 05:49:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10741-daed4-2.html 2026-03-02 07:22:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mg2ptqb6c225 2026-03-02 07:22:58+00:00| seen|...

CVE-2026-28554

wpForo Forum 2.4.14 contains a missing authorization vulnerability that allows authenticated subscribers to approve or unapprove any forum post via the wpforoapproveajax AJAX handler. Attackers exploit the nonce-only check by submitting a valid nonce with an arbitrary post ID to bypass moderation...

WordPress Plugin Context Blog Information Disclosure Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin Context Blog. The...

CVE-2026-28554 wpForo Forum 2.4.14 Missing Authorization via Post Approval AJAX Handler

wpForo Forum 2.4.14 contains a missing authorization vulnerability that allows authenticated subscribers to approve or unapprove any forum post via the wpforoapproveajax AJAX handler. Attackers exploit the nonce-only check by submitting a valid nonce with an arbitrary post ID to bypass moderation...

CVE-2026-27151

Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, the moveposts action only checked canmoveposts? on the source topic but never validated write permissions on the destination topic. This allowed TL4 users and category group moderators to move...

CVE-2026-27162

Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, postsnearby was checking topic access but then returning all posts regardless of type, including whispers that should only be visible to whisperers. Use Post.securedguardian to properly filter po...

CVE-2026-28409

creationtimestamp| type| source ---|---|--- 2026-02-28 00:56:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfuzcrimck2u 2026-02-28 01:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116145666777961188 2026-02-28 01:30:32+00:00| seen|...

CVE-2026-3255

creationtimestamp| type| source ---|---|--- 2026-02-27 23:24:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfuu7hwlqs2x 2026-02-27 23:30:45+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mfuuk6yvv62a...

CVE-2026-26207

Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, discourse-policy plugin allows any authenticated user to interact with policies on posts they do not have permission to view. The PolicyController loads posts by ID without verifying the current...

CVE-2025-11251

creationtimestamp| type| source ---|---|--- 2026-02-27 13:31:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mftt2i2t3x2n 2026-02-27 13:38:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mftthya3zh27 2026-02-27 18:00:15+00:00| seen|...

CVE-2026-0980

creationtimestamp| type| source ---|---|--- 2026-02-27 08:18:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mftbk4vnqy2u 2026-02-27 08:18:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mftbkhgxec2v 2026-02-27 10:03:14+00:00| seen|...

CVE-2026-3301

creationtimestamp| type| source ---|---|--- 2026-02-27 06:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mfszu67jax2m 2026-02-27 06:19:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mft2vd6lmq2s 2026-02-27 07:03:30+00:00| seen|...