CVE-2026-15939

creationtimestamp| type| source ---|---|--- 2026-08-02 10:54:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms3sytcj3t2z 2026-08-02 11:50:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms3w6266kl2v 2026-08-02 11:51:03+00:00| seen|...

CVE-2026-16062

creationtimestamp| type| source ---|---|--- 2026-08-02 10:50:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms3ss6ptam2v...

Spring Cloud Config Server - Path Traversal

Spring Cloud 3.1.x 3.1.13, 4.1.x 4.1.9, 4.2.x 4.2.3, 4.3.x 4.3.2, and 5.0.x 5.0.2 contain a path traversal caused by profile parameter substitution in Config Server using native file system backend, letting attackers access files outside configured directories, exploit requires crafted request. i...

DomainMOD 4.11.01 - Cross-Site Scripting

DomainMOD 4.11.01 contains a cross-site scripting vulnerability via assets/add/dns.php Profile Name or notes field. id: CVE-2018-19914 info: name: DomainMOD 4.11.01 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.11.01 contains a cross-site scripting...

Profile Builder < 3.4.9 - Improper Authentication

The Profile Builder plugin before 3.4.9 for WordPress allows unauthenticated attackers to gain administrative access by exploiting an improper authentication vulnerability in the password reset functionality. An attacker can reset the password of any user, including administrators, without proper...

User Profile Picture < 2.5.0 - Sensitive Information Disclosure

The REST API endpoint getusers in the User Profile Picture WordPress plugin before 2.5.0 returned more information than was required for its functionality to users with the uploadfiles capability. This included password hashes, hashed user activation keys, usernames, emails, and other less...

CVE-2026-18352

creationtimestamp| type| source ---|---|--- 2026-08-02 01:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2rtsjy6e2z 2026-08-02 08:09:11+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3ms3jrvygge2p 2026-08-02 08:35:49+00:00| seen|...

CVE-2026-18556

creationtimestamp| type| source ---|---|--- 2026-08-01 21:44:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6yk3ai2b622lz 2026-08-02 03:27:01+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117023665141420912 2026-08-02 06:36:08+00:00| seen|...

CVE-2026-67308

creationtimestamp| type| source ---|---|--- 2026-08-01 21:00:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2egyp24c2b 2026-08-01 21:27:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117022368056209142 2026-08-02 12:28:05+00:00| seen|...

CVE-2026-67289

creationtimestamp| type| source ---|---|--- 2026-08-01 20:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms2bpmtxek2l 2026-08-02 07:30:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/117024740061481140...

CVE-2026-66402

creationtimestamp| type| source ---|---|--- 2026-08-01 20:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms2bm2o5mc2a 2026-08-02 09:00:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3ms3mnkwzbp2x 2026-08-02 09:02:35+00:00| seen|...

CVE-2026-67331

creationtimestamp| type| source ---|---|--- 2026-08-01 20:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2b3iwxgv2a 2026-08-01 22:07:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2i54ja5f2z 2026-08-01 23:08:19+00:00| seen|...

CVE-2026-67328

creationtimestamp| type| source ---|---|--- 2026-08-01 18:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms22etaago2p 2026-08-01 22:34:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2jolkde62v 2026-08-01 22:34:53+00:00| seen|...

CVE-2026-67343

creationtimestamp| type| source ---|---|--- 2026-08-01 15:01:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrzqe7ct742n 2026-08-01 22:28:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2jdt446r25...

CVE-2026-2411

Zephyr's Bluetooth host declares a GATT characteristic as two consecutive attributes: a Characteristic Declaration whose permission is hard-coded to BTGATTPERMREAD, and a Characteristic Value attribute that carries the application-specified security permissions e.g. BTGATTPERMREADENCRYPT /...

CVE-2026-67330

@better-auth/scim a better-auth plugin versions = 1.4.0-beta.27 through = 1.7.0-beta.0 through = 1.7.0-beta.9 contain an authorization bypass. SCIM token issuance did not reject provider IDs already used by existing SSO, SAML, OIDC, generic OAuth, or social account providers, and the same logical...

CVE-2026-6453

creationtimestamp| type| source ---|---|--- 2026-08-01 10:22:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jaeeialp5gym4 2026-08-01 17:33:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzyur7if52x 2026-08-01 17:34:09+00:00| seen|...

CVE-2026-13157

creationtimestamp| type| source ---|---|--- 2026-08-01 10:20:08+00:00| seen| https://bsky.app/profile/smartdeals.bsky.social/post/3mrzan5fore2x 2026-08-01 13:00:04+00:00| seen| Telegram/zkpMdkb1nwTnC0N6uNzVvNYCe5r6OIkmQsBbvblzOMqyUQE 2026-08-01 14:55:17+00:00| seen|...

CVE-2026-18062

creationtimestamp| type| source ---|---|--- 2026-08-01 10:08:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ibokoolakvlm2 2026-08-01 17:44:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzzihv5tx2d 2026-08-01 17:45:13+00:00| seen|...

User Profile Builder < 3.11.8 - File Upload

The User Profile Builder WordPress plugin before 3.11.8 does not have proper authorisation, allowing unauthenticated users to upload media files via the async upload functionality of WP. id: CVE-2024-6366 info: name: User Profile Builder 3.11.8 - File Upload author: s4e-io severity: high...