CVE-2026-65443

creationtimestamp| type| source ---|---|--- 2026-07-28 00:54:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mro75mxm2q2j...

CVE-2026-65447

creationtimestamp| type| source ---|---|--- 2026-07-28 00:26:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mro5lgmkep24...

CVE-2026-65439

creationtimestamp| type| source ---|---|--- 2026-07-28 00:22:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mro5fhjm5z2g 2026-07-28 14:05:17+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrple3oeuj2z...

CVE-2026-65440

creationtimestamp| type| source ---|---|--- 2026-07-28 00:02:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mro4bmo6yw2j 2026-07-28 11:13:51+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrpbrjlasm2z...

SUSE SLES15 Security Update : perl-DBI (SUSE-SU-2026:3283-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3283-1 advisory. This update for perl-DBI fixes the following issues - CVE-2026-14380: unvalidated string eval interpolation of the Profile package...

PT-2026-65428

The PickPlugins Question Answer plugin for WordPress is vulnerable to SQL Injection in versions up to and including 1.2.73. This is due to insufficient sanitization of user-supplied input via the 'id' GET parameter in the user profile template combined with the use of wp unslash which removes...

SUSE SLES16 Security Update : perl-DBI (SUSE-SU-2026:22845-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22845-1 advisory. - CVE-2026-15392: failure to validate symbolic links during table path resolution could allow unauthorized file reads and writes...

CVE-2026-43776

creationtimestamp| type| source ---|---|--- 2026-07-27 23:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrnysrrtak2j 2026-07-28 04:50:26+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 17:18:45+00:00|...

CVE-2026-66824

creationtimestamp| type| source ---|---|--- 2026-07-27 22:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnvnchfda2s 2026-07-30 04:58:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrtnpfqkqd2e...

CVE-2026-59239

creationtimestamp| type| source ---|---|--- 2026-07-27 21:22:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrntd4xjjg2i...

CVE-2026-66028

creationtimestamp| type| source ---|---|--- 2026-07-27 19:22:02+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrnmljfshn2c...

CVE-2026-65015

creationtimestamp| type| source ---|---|--- 2026-07-27 19:20:30+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrnmis3k5v2n...

GHSA-PM35-FQVH-CQ5G

creationtimestamp| type| source ---|---|--- 2026-07-27 19:17:24+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrnmdahelz2n...

CVE-2018-13012

creationtimestamp| type| source ---|---|--- 2026-07-27 19:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrnlqtkadf2i...

CVE-2025-50455

creationtimestamp| type| source ---|---|--- 2026-07-27 19:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnledemyl2a...

CVE-2026-66029

Ekushey Project Manager CRM through version 5.0 contains a stored cross-site scripting vulnerability that allows authenticated client users to inject arbitrary HTML and JavaScript by entering malicious payloads into the client Name field on the Edit Profile page without sanitization. Attackers ca...

CVE-2026-63077

creationtimestamp| type| source ---|---|--- 2026-07-27 18:06:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnidphmxq2j 2026-07-28 09:00:06+00:00| seen| https://t.me/thehackernews/9631 2026-07-28 10:00:53+00:00| seen|...

CVE-2026-66029

Ekushey Project Manager CRM through version 5.0 contains a stored cross-site scripting vulnerability that allows authenticated client users to inject arbitrary HTML and JavaScript by entering malicious payloads into the client Name field on the Edit Profile page without sanitization. Attackers ca...

EUVD-2026-49393

Ekushey Project Manager CRM through version 5.0 contains a stored cross-site scripting vulnerability that allows authenticated client users to inject arbitrary HTML and JavaScript by entering malicious payloads into the client Name field on the Edit Profile page without sanitization. Attackers ca...

CVE-2026-66029

CVE-2026-66029 affects Ekushey Project Manager CRM up to version 5.0. A stored cross-site scripting (XSS) vulnerability exists in the client management flow: authenticated client users can inject arbitrary HTML/JavaScript by entering payloads into the client Name field on the Edit Profile page, w...