CVE-2026-9010

creationtimestamp| type| source ---|---|--- 2026-05-20 05:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmb4qr6iq72k 2026-05-20 06:36:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmbc462u7i2k 2026-05-20 16:32:07+00:00| seen|...

CVE-2026-6456

creationtimestamp| type| source ---|---|--- 2026-05-20 03:01:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmaw2wrbuy2w 2026-05-20 05:01:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmb4rk65id2h...

WordPress plugin Oliver POS 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

CVE-2026-34234

creationtimestamp| type| source ---|---|--- 2026-05-19 23:01:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmaio2asmi26 2026-05-19 23:32:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmakfmu6rp2o 2026-05-20 00:00:42+00:00| seen|...

CVE-2026-5090

creationtimestamp| type| source ---|---|--- 2026-05-19 22:08:30+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmafpoatgc22 2026-05-19 22:41:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmahk7a4xu2p...

CVE-2026-32740

creationtimestamp| type| source ---|---|--- 2026-05-19 21:00:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmabvj2lx52g 2026-05-19 23:03:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmair6xo7c2t 2026-05-20 02:47:22+00:00| seen|...

CVE-2026-33633

creationtimestamp| type| source ---|---|--- 2026-05-19 19:02:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mma3chpmjk2w 2026-05-19 19:47:22+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mma5tcue5g2c 2026-05-19 20:18:07+00:00| seen|...

CVE-2026-33052 MantisBT: Authorization Bypass in Global Profile Creation

Mantis Bug Tracker MantisBT is an open source issue tracker. Versions 2.28.0 and 2.28.1 allow a low-privileged authenticated user assigned the "addprofilethreshold" permission to create a global profile despite not having manageglobalprofilethreshold, by tampering with the userid parameter in a...

EUVD-2026-30820

Mantis Bug Tracker MantisBT is an open source issue tracker. Versions 2.28.0 and 2.28.1 allow a low-privileged authenticated user assigned the "addprofilethreshold" permission to create a global profile despite not having manageglobalprofilethreshold, by tampering with the userid parameter in a...

CVE-2026-33052

MantisBT (MantisBT) versions 2.28.0 and 2.28.1 permit a low-privileged authenticated user with add_profile_threshold to create a global profile by tampering with the user_id in a profile-creation request, enabling an authorization bypass. The issue is fixed in version 2.28.2. Affected component: ...

CVE-2026-39079

creationtimestamp| type| source ---|---|--- 2026-05-18 17:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mm5e2dmzu32l 2026-05-18 17:06:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm5ef6vruh2n 2026-05-18 17:37:07+00:00| seen|...

CVE-2026-42009

creationtimestamp| type| source ---|---|--- 2026-05-18 16:51:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm5dkd55752e 2026-05-18 17:34:39+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mm5fx45bls2v 2026-05-19 20:10:47+00:00| seen|...

CVE-2026-8775

creationtimestamp| type| source ---|---|--- 2026-05-18 03:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mm3v3vvnbw26 2026-05-18 03:00:33+00:00| seen| https://infosec.exchange/users/offseq/statuses/116593342919880835 2026-05-18 03:00:39+00:00| seen|...

CVE-2021-47934 MyBB Timeline Plugin 1.0 Cross-Site Scripting and CSRF

MyBB Timeline Plugin 1.0 contains cross-site scripting vulnerabilities that allow attackers to inject malicious scripts through thread titles, post content, and user profile fields like Location and Bio. Attackers can also exploit a cross-site request forgery vulnerability in the timeline.php...

CVE-2026-42458

Magento Long Term Support LTS is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Prior to 20.18.0, there is a reflected XSS vulnerability under admin panel - System - Import/Export -...

CVE-2026-42458

Magento Long Term Support LTS is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Prior to 20.18.0, there is a reflected XSS vulnerability under admin panel - System - Import/Export -...

EUVD-2026-30575

Magento Long Term Support LTS is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Prior to 20.18.0, there is a reflected XSS vulnerability under admin panel - System - Import/Export -...

CVE-2026-42458 Magento LTS: Reflected XSS - Import -> Data Flow (profiles)

Magento Long Term Support LTS is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Prior to 20.18.0, there is a reflected XSS vulnerability under admin panel - System - Import/Export -...

CVE-2026-42458 Magento LTS: Reflected XSS - Import -> Data Flow (profiles)

Magento Long Term Support LTS is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Prior to 20.18.0, there is a reflected XSS vulnerability under admin panel - System - Import/Export -...

CVE-2026-42458

CVE-2026-42458 (Magento LTS/OpenMage Magento-LTS) : A reflected XSS in the admin-import/export Dataflow - Profiles feature allows injection via the filename parameter in the Dataflow Import path. Affected: OpenMage/magento-lts (unofficial Magento LTS) prior to version 20.18.0. Evidence across sou...