EUVD-2026-17745

XenForo before 2.3.10 and before 2.2.19 is vulnerable to stored cross-site scripting XSS in structured text mentions, primarily affecting legacy profile post content. An attacker can inject malicious scripts through crafted mentions that are stored and executed when other users view the content...

CVE-2026-35037

creationtimestamp| type| source ---|---|--- 2026-04-01 03:18:31+00:00| published-proof-of-concept| https://github.com/lin-snow/Ech0/security/advisories/GHSA-cqgf-f4x7-g6wc 2026-04-06 18:21:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mituyphtjk22 2026-04-06 19:29:09+00:00| see...

CVE-2026-34550

creationtimestamp| type| source ---|---|--- 2026-04-01 02:25:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifnaoztsh24...

CVE-2026-34555

creationtimestamp| type| source ---|---|--- 2026-04-01 02:22:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifn2pvkjf2i...

CVE-2026-4668

creationtimestamp| type| source ---|---|--- 2026-04-01 02:19:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifmvdvqfb2s 2026-04-01 19:45:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mihhd2kr7a2k...

CVE-2026-34548

creationtimestamp| type| source ---|---|--- 2026-04-01 02:14:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifmly4dqe22...

CVE-2026-34547

creationtimestamp| type| source ---|---|--- 2026-04-01 02:09:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifmdyrvnp24...

CVE-2026-34549

creationtimestamp| type| source ---|---|--- 2026-04-01 02:05:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifm52eyga22...

CVE-2026-34546

creationtimestamp| type| source ---|---|--- 2026-04-01 02:04:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miflzv36xf27...

CVE-2026-35057

XenForo before 2.3.10 and before 2.2.19 is vulnerable to stored cross-site scripting XSS in structured text mentions, primarily affecting legacy profile post content. An attacker can inject malicious scripts through crafted mentions that are stored and executed when other users view the content...

CVE-2026-35057

XenForo before 2.3.10 and before 2.2.19 is vulnerable to stored cross-site scripting XSS in structured text mentions, primarily affecting legacy profile post content. An attacker can inject malicious scripts through crafted mentions that are stored and executed when other users view the content...

CVE-2026-35057 XenForo Stored Cross-Site Scripting via Structured Text Mentions

XenForo before 2.3.10 and before 2.2.19 is vulnerable to stored cross-site scripting XSS in structured text mentions, primarily affecting legacy profile post content. An attacker can inject malicious scripts through crafted mentions that are stored and executed when other users view the content...

PT-2026-29432

XenForo before 2.3.10 and before 2.2.19 is vulnerable to stored cross-site scripting XSS in structured text mentions, primarily affecting legacy profile post content. An attacker can inject malicious scripts through crafted mentions that are stored and executed when other users view the content...

WordPress User Profile Builder - Beautiful User Registration Forms, User Profiles & User Role Editor plugin <= 3.15.5 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Post Author Reassignment via Avatar Field vulnerability

WordPress User Profile Builder - Beautiful User Registration Forms, User Profiles & User Role Editor plugin = 3.15.5 - Insecure Direct Object Reference to Authenticated Subscriber+ Arbitrary Post Author Reassignment via Avatar Field vulnerability discovered by type5afe in WordPress Plugin Profile...

CVE-2026-5214

creationtimestamp| type| source ---|---|--- 2026-03-31 23:21:09+00:00| published-proof-of-concept| Telegram/2Cqkqvtgaegci7UwxXD-qABu2YaVYQoLZQGlshG1KuvbS0 2026-03-31 23:21:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifcwsffwy2s 2026-04-01 03:07:04+00:00| seen|...

CVE-2026-34551

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a null-pointer dereference NPD in CIccTagLut16::Write can be triggered when processing a crafted ICC profile embedded in a TIFF and extracted during iccTiffDump. This issue has...

CVE-2026-34549

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is an Undefined Behavior UB condition in IccUtil.cpp triggered by a crafted input profile. Under UndefinedBehaviorSanitizer, the issue is reported as invalid left shift...

CVE-2026-34547

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, an Undefined Behavior UB condition in IccUtil.cpp can be triggered by a crafted ICC profile when running iccDumpProfile. This issue has been patched in version 2.3.1.6...

CVE-2026-35056

creationtimestamp| type| source ---|---|--- 2026-03-31 23:16:41+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-35056 2026-04-01 02:01:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miflutj6hx2d 2026-04-01 03:18:10+00:00| seen|...

CVE-2025-71281

creationtimestamp| type| source ---|---|--- 2026-03-31 23:16:40+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2025-71281 2026-04-01 02:24:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mifn7345oc27 2026-04-01 03:14:55+00:00| seen|...