ZTE多款产品 资源管理错误漏洞

ZTE H196Q is a product of China's ZTE Corporation. The ZTE H196Q is a network device. The ZTE H168N is a router. The ZTE H388X is a modem. Several ZTE products have a resource management vulnerability; this vulnerability arises from sending overly large POST request bodies in the...

Cross-site Scripting (XSS)

Overview YAFNET.Core is an Open Source Forum solution! The YAF.NET project is an international collaboration of like-minded, skilled, and creative individuals who are striving to make YAF.NET the most robust and malleable forum solutions available. Affected versions of this package are vulnerable...

YAFNET has Stored XSS in Forum Thread Posts/Replies that Allows Arbitrary JavaScript Execution for All Thread Viewers

Description: Stored Cross-Site Scripting XSS occurs when user-supplied input is persisted by the application and later rendered in another user's browser without proper sanitization or contextual output encoding. When the vulnerable sink is a high-traffic surface such as a public forum thread, th...

CVE-2026-44331

creationtimestamp| type| source ---|---|--- 2026-05-05 20:20:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4z4tbpat2g 2026-05-05 20:48:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml52qhxja22n 2026-05-06 07:49:10+00:00| seen|...

CVE-2026-43284

creationtimestamp| type| source ---|---|--- 2026-05-05 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260506 2026-05-05 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260506...

PT-2026-37310

Name of the Vulnerable Software and Affected Versions YetAnotherForum.NET YAF.NET versions prior to 4.0.5 YetAnotherForum.NET YAF.NET versions prior to 3.2.12 Description The thread posting and reply feature allows user-supplied content to be stored server-side and rendered on the thread page...

CVE-2026-7776

creationtimestamp| type| source ---|---|--- 2026-05-04 22:49:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2qzjvh2626 2026-05-04 23:06:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2rxo7cyx2p 2026-05-05 02:09:50+00:00| seen|...

CVE-2026-29004

creationtimestamp| type| source ---|---|--- 2026-05-04 18:28:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2cflgtyh2n 2026-05-04 18:28:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2cgiszak2l 2026-05-04 19:11:30+00:00| seen|...

CVE-2026-41471

creationtimestamp| type| source ---|---|--- 2026-05-04 18:24:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2c6cl7wd2e 2026-05-04 18:57:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2dzsfn3q2t 2026-05-17 11:10:09+00:00| seen|...

CVE-2026-26332

creationtimestamp| type| source ---|---|--- 2026-05-04 18:10:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2bgr7zhc2w 2026-05-04 18:11:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2bhswa6s2e 2026-05-25 09:07:07+00:00| seen|...

CVE-2026-42079

creationtimestamp| type| source ---|---|--- 2026-05-04 18:10:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2bgbykt22w 2026-05-04 18:11:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2bhdmvyd2c...

CERTFR-2026-ACT-020

creationtimestamp| type| source ---|---|--- 2026-05-04 15:41:45+00:00| seen| https://bsky.app/profile/infosecfr.skyfleet.blue/post/3mkzz4cqpnu2p 2026-05-04 15:42:42+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mkzz5za2nx23 2026-05-04 15:42:46+00:00| seen|...

CVE-2026-34059

creationtimestamp| type| source ---|---|--- 2026-05-04 14:51:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkzwbqp6w52h 2026-05-04 15:31:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkzyjg7ozk2z 2026-05-04 17:46:26+00:00| seen|...

DHS Demanded Google Surrender Data on Canadian’s Activity, Location Over Anti-ICE Posts

Using a 1930s trade law, Homeland Security targeted the man—who hasn’t entered the US in more than a decade—following posts on X condemning the killings of Renee Good and Alex Pretti...

CVE-2026-6266

creationtimestamp| type| source ---|---|--- 2026-05-04 14:37:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkzvirjkz22f 2026-05-04 14:37:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkzvj7p6p52s 2026-05-04 14:38:33+00:00| seen|...

CVE-2026-7482

creationtimestamp| type| source ---|---|--- 2026-05-04 14:15:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkzuc7suqr2k 2026-05-04 14:56:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkzwkpa3ak2k 2026-05-04 21:09:36+00:00| seen|...

CVE-2026-7733

creationtimestamp| type| source ---|---|--- 2026-05-04 06:41:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkz2vysagy2n 2026-05-04 08:32:21+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mkzb4ho3ah2f...

CVE-2026-42365

creationtimestamp| type| source ---|---|--- 2026-05-04 01:19:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkyiwq46vt2w 2026-05-04 01:33:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkyjq3vlbn2w 2026-05-04 03:00:30+00:00| seen|...

CVE-2026-26956

creationtimestamp| type| source ---|---|--- 2026-05-01 20:45:39+00:00| published-proof-of-concept| https://github.com/patriksimek/vm2/security/advisories/GHSA-ffh4-j6h5-pg66 2026-05-04 18:28:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2cftc6av2t 2026-05-04...

WordPress Bulk Edit Posts and Products in Spreadsheet plugin <= 2.25.16 - Unauthenticated Reflected Cross-Site Scripting vulnerability

Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin Bulk Edit Posts and Products in Spreadsheet versions = 2.25.16...