EUVD-2026-27864

A vulnerability in the REST API of Cisco Slido could have allowed an authenticated, remote attacker to access the social profile data of other users or affect quiz and poll results. Cisco has addressed this vulnerability in Cisco Slido and no customer action is needed. This vulnerability existed...

CVE-2026-20219

A vulnerability in the REST API of Cisco Slido could have allowed an authenticated, remote attacker to access the social profile data of other users or affect quiz and poll results. Cisco has addressed this vulnerability in Cisco Slido and no customer action is needed. This vulnerability existed...

CVE-2026-20219

A vulnerability in the REST API of Cisco Slido could have allowed an authenticated, remote attacker to access the social profile data of other users or affect quiz and poll results. Cisco has addressed this vulnerability in Cisco Slido and no customer action is needed. This vulnerability existed...

CVE-2026-20219

A vulnerability in the REST API of Cisco Slido could have allowed an authenticated, remote attacker to access the social profile data of other users or affect quiz and poll results. Cisco has addressed this vulnerability in Cisco Slido and no customer action is needed. This vulnerability existed...

CVE-2026-20219

Cisco Slido REST API contains an insecure direct object reference that could let an authenticated, remote attacker view other users’ social profiles or affect quiz/poll results via a crafted request. Impact described as low confidentiality and integrity impact, with no availability impact. Cisco ...

Incorrect Authorization

Overview auth0-js is an Auth0 headless browser sdk Affected versions of this package are vulnerable to Incorrect Authorization via token validation. An attacker can gain unauthorized access to user profile information by providing a specifically crafted invalid ID token along with a valid access...

CVE-2026-40562

creationtimestamp| type| source ---|---|--- 2026-05-06 16:55:27+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ml765woa7b2s 2026-05-06 17:01:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml76ietizz2n...

Cisco Slido Insecure Direct Object Reference Vulnerability

A vulnerability in the REST API of Cisco Slido could have allowed an authenticated, remote attacker to access the social profile data of other users or affect quiz and poll results. Cisco has addressed this vulnerability in Cisco Slido and no customer action is needed. This vulnerability existed...

CVE-2025-71253

creationtimestamp| type| source ---|---|--- 2026-05-06 05:38:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5ydnqr3a2p 2026-05-06 05:55:39+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3ml5zc4mn572o 2026-05-06 18:59:57+00:00| seen|...

PT-2026-38267

A reflected XSS vulnerability was found under admin panel - System - Import/Export - Dataflow - Profiles. Steps to produce + Login to the admin panel + Go to the path System - Import/Export - Dataflow - Profiles + Select profile direction as Import. + Click on Import Customers + Upload the file...

CVE-2026-42088

creationtimestamp| type| source ---|---|--- 2026-05-04 18:19:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2bwjcjwo2n 2026-05-04 18:37:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2cwddwoq2v...

CVE-2026-42796

creationtimestamp| type| source ---|---|--- 2026-05-04 18:19:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2bwbqkzy2k 2026-05-04 18:47:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2dhoyfqj2k 2026-05-08 11:00:05+00:00| seen|...

CVE-2026-42079

creationtimestamp| type| source ---|---|--- 2026-05-04 18:10:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2bgbykt22w 2026-05-04 18:11:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2bhdmvyd2c...

CVE-2026-42376

creationtimestamp| type| source ---|---|--- 2026-05-04 17:02:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116517380246425239 2026-05-04 18:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2autcjzk2f 2026-05-04 18:44:20+00:00| seen|...

CVE-2026-44339

creationtimestamp| type| source ---|---|--- 2026-05-04 16:26:57+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-gmjg-hv98-qggq 2026-05-08 17:07:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mle7rnihnv2h 2026-05-08...

CVE-2026-23918

creationtimestamp| type| source ---|---|--- 2026-05-04 16:22:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml23ey76qf2z 2026-05-04 17:18:52+00:00| seen| https://infosec.exchange/users/harrysintonen/statuses/116517446102524326 2026-05-04 17:48:44+00:00| seen|...

CVE-2026-7748

creationtimestamp| type| source ---|---|--- 2026-05-04 10:28:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkzhle3opr2k 2026-05-04 10:57:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkzj77wp5h2t...

CVE-2026-7733

creationtimestamp| type| source ---|---|--- 2026-05-04 06:41:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkz2vysagy2n 2026-05-04 08:32:21+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mkzb4ho3ah2f...

CVE-2026-42370

creationtimestamp| type| source ---|---|--- 2026-05-04 01:18:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkyivhrpyd2w 2026-05-04 01:19:58+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mkyix5seejv2 2026-05-04...

WordPress TreePress – Easy Family Trees & Ancestor Profiles plugin <= 3.0.6 - Unauthenticated Reflected Cross-Site Scripting vulnerability

Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin TreePress – Easy Family Trees & Ancestor Profiles versions = 3.0.6...