Popup by Supsystic < 1.10.9 - Subscriber Email Addresses Disclosure

The Popup by Supsystic WordPress plugin before 1.10.9 does not have any authentication and authorisation in an AJAX action, allowing unauthenticated attackers to call it and get the email addresses of subscribed users id: CVE-2022-0424 info: name: Popup by Supsystic 1.10.9 - Subscriber Email...

GHSA-9W56-46F6-3QHX vulnerabilities

Vulnerabilities for packages: checkov...

CVE-2021-38671

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:22+00:00| seen| https://t.me/hackingAttack/23975 2026-09-02 01:02:52+00:00| seen| https://t.me/hackingAttack/23975...

CVE-2026-4931

creationtimestamp| type| source ---|---|--- 2026-09-01 20:00:11+00:00| seen| https://t.me/hackingAttack/183054 2026-09-01 20:00:11+00:00| seen| https://t.me/hackingAttack/183052 2026-09-02 01:00:28+00:00| seen| https://t.me/hackingAttack/183052 2026-09-02 01:00:28+00:00| seen|...

CVE-2026-77037

creationtimestamp| type| source ---|---|--- 2026-08-28 19:48:29+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mu64x7sf222k 2026-08-29 06:02:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu77chep2i2r...

EUVD-2026-67840

Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs omits SystemPrivilege.ControlAccess checks from IamApi.listRoles, IamApi.getRole, and IamApi.listPrivileges in yamcs-core/src/main/java/org/yamcs/http/api/IamApi.java. Any authenticated account can call GET /api/roles, GET...

CVE-2026-65641

creationtimestamp| type| source ---|---|--- 2026-08-26 08:32:55+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mtxwcgg72o2v 2026-08-26 12:35:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtydtpmdku2x 2026-08-26 22:58:41+00:00| seen|...

CVE-2026-68062

creationtimestamp| type| source ---|---|--- 2026-08-24 08:45:36+00:00| seen| https://jvn.jp/en/jp/JVN33423625 2026-08-25 09:47:17+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtvjyjgioo2g...

CVE-2026-66109

creationtimestamp| type| source ---|---|--- 2026-08-24 08:45:26+00:00| seen| https://jvn.jp/en/jp/JVN33423625 2026-08-25 09:46:37+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtvjxd7dnh2i...

CVE-2026-16835

creationtimestamp| type| source ---|---|--- 2026-08-19 20:11:48+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthk3phxuc2p 2026-08-20 00:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mthzncgbuo2e 2026-08-24 13:16:43+00:00| seen|...

CVE-2026-70980

creationtimestamp| type| source ---|---|--- 2026-08-19 07:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtga3iytc32e 2026-08-19 16:47:54+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-26 00:37:07+00:00| seen|...

GHSA-7GWP-5PFP-969J

creationtimestamp| type| source ---|---|--- 2026-08-18 00:32:32+00:00| seen| https://gist.github.com/alon710/9d43dd3bb8cad3aff005a6b8be53e64d 2026-08-21 09:24:49+00:00| seen| https://bsky.app/profile/mel-echosphere.bsky.social/post/3mtlgunnc4g2v...

GHSA-GQCH-G4W5-7QCW

creationtimestamp| type| source ---|---|--- 2026-08-17 22:31:53+00:00| seen| https://gist.github.com/alon710/21683b4d8ecf3653b83554b3c12c2c47 2026-08-18 00:01:16+00:00| seen| https://gist.github.com/alon710/21683b4d8ecf3653b83554b3c12c2c47...

GHSA-2QJ4-MMR9-4V2F

creationtimestamp| type| source ---|---|--- 2026-08-17 18:31:27+00:00| seen| https://gist.github.com/alon710/3510ab254b4d34227fef740b05b4af4e...

GHSA-P3GQ-PCG9-QVFV

creationtimestamp| type| source ---|---|--- 2026-08-17 13:48:35+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtbtqn42ra2c...

EUVD-2026-54910

A security vulnerability has been detected in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the function strcpy of the file /goform/pptpSrvGlobalConfig. Such manipulation of the argument EncryptionMode leads to stack-based buffer overflow. The attack can be executed remotely. The exploit has...

EUVD-2026-52554

A vulnerability was detected in cemtan sar2html 4.0.0. This affects an unknown part of the file sar2html.py of the component Search. Performing a manipulation of the argument Search results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used...

EUVD-2026-42965

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Adam Retail Automation Ltd. MobilMen 20T allows SQL Injection. This issue affects MobilMen 20T: from v3 through 10072026. NOTE: The vendor was contacted early about this disclosure but did not...

GHSA-WQXV-W64V-5WH6 Suspended Coder users retain access to AI Bridge LLM proxy endpoints

Summary AI Bridge proxy endpoints authenticate via Server.IsAuthorized in coderd/aibridgedserver, which validates key format, expiry, secret and deleted or system users but does not check whether the account is suspended. Because suspension does not revoke existing API keys, a suspended user's...

CVE-2026-13560

A security vulnerability has been detected in Edimax EW-7478APC 1.04. The affected element is the function formAccept of the file /goform/formAccept of the component POST Request Handler. The manipulation of the argument submit-url leads to os command injection. The attack is possible to be carri...