CVE-2026-4299

The MainWP Child Reports plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 2.2.6. This is due to a missing capability check in the heartbeatreceived function in the LiveUpdate class. This makes it possible for authenticated attackers, with...

auditor-v1

🔐 Web Security Auditor v2.0 Mini BurpSuite / OWASP ZAP hech...

CVE-2026-6162 PHPGurukul Company Visitor Management System bwdates-reports-details.php cross site scripting

A vulnerability has been found in PHPGurukul Company Visitor Management System 2.0. This impacts an unknown function of the file /bwdates-reports-details.php. The manipulation of the argument fromdate leads to cross site scripting. The attack is possible to be carried out remotely. The exploit ha...

CVE-2026-6162

A vulnerability has been found in PHPGurukul Company Visitor Management System 2.0. This impacts an unknown function of the file /bwdates-reports-details.php. The manipulation of the argument fromdate leads to cross site scripting. The attack is possible to be carried out remotely. The exploit ha...

Linux Distros Unpatched Vulnerability : CVE-2026-1516

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab EE affecting all versions from 18.0.0 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that in Code Quality...

CVE-2026-6162: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in PHPGurukul Company Visitor Management System 2.0. This impacts an unknown function of the file /bwdates-reports-details.php. The manipulation of the argument fromdate leads to cross site scripting. The attack is possible to be carried out remotely. The exploit ha...

PHPGurukul Company Visitor Management System: Code Injection Vulnerability

PHPGurukul Company Visitor Management System is a visitor management system developed by PHPGurukul Corporation. Version 2.0 of the PHPGurukul Company Visitor Management System has a code injection vulnerability. This vulnerability stems from incorrect handling of the parameter “fromdate” in the...

PT-2026-32413

GitLab has remediated an issue in GitLab EE affecting all versions from 18.0.0 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that in Code Quality reports could have allowed an authenticated user to leak IP addresses of users viewing the report via specially crafted content...

PT-2026-32263

A vulnerability has been found in PHPGurukul Company Visitor Management System 2.0. This impacts an unknown function of the file /bwdates-reports-details.php. The manipulation of the argument fromdate leads to cross site scripting. The attack is possible to be carried out remotely. The exploit ha...

cyber-punk

Cyber Punk Security Vulnerability Scanner A Claude Code plu...

CVE-2026-6157

creationtimestamp| type| source ---|---|--- 2026-04-12 18:27:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116393143940938921 2026-04-13 04:17:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjdz3hiejr27 2026-04-13 05:18:10+00:00| published-proof-of-concep...

CVE-2018-25258

creationtimestamp| type| source ---|---|--- 2026-04-12 14:16:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjck2qo2dc23 2026-04-12 15:32:40+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mjcodso6mx25...

CVE-2026-6112

creationtimestamp| type| source ---|---|--- 2026-04-12 05:16:17+00:00| published-proof-of-concept| Telegram/rbF7fSnY0VEd6aCx4theR2I2I4JGiCz6cyJ3UThbj-lLIU 2026-04-12 05:45:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjbnkgiyk52w 2026-04-12 06:35:09+00:00| seen|...

CVE-2025-81110

creationtimestamp| type| source ---|---|--- 2026-04-12 03:00:07+00:00| published-proof-of-concept| Telegram/S964UnaAzc4FW7CZCUbAm7wNqkztcWapRmtGqRf9U9sXCaA 2026-04-12 03:00:11+00:00| published-proof-of-concept| Telegram/uShh7JQ-RKU8UrIGlZFZPf5aOBK5MJm9YT2tTiL1E4LyHaQ...

A Relay a Day Keeps the AirTag Away: Practical Relay Attacks on Apple's AirTags

Apple AirTags use Apple's Find My network: when nearby iDevices detect a lost tag, they anonymously forward an encrypted location report to Apple, which the tag's owner can then fetch to locate the item. That encryption protects privacy -- neither the finder nor Apple learns the owner's identity ...

CVE-2025-15480

In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, ubuntu-desktop-provision could include the user's password hash in the attached logs...

CVE-2025-14551

In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs...

CVE-2026-6057

creationtimestamp| type| source ---|---|--- 2026-04-10 10:04:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj532zqngr2i 2026-04-10 10:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116379944895861861 2026-04-10 10:30:33+00:00| seen|...

[SECURITY] Fedora 43 Update: cockpit-360-1.fc43

The Cockpit Web Console enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more...

Gramps Web API: Private Sub-Object Data in Non-Private Objects Exposed to Guest Users

Summary Users with the Guest role could receive private sub-object data e.g. private alternate names, private addresses, private note/citation/media handles through list API endpoints such as GET /api/people/, GET /api/places/, GET /api/events/, and all other object list endpoints. This does not...