CVE-2026-60916

creationtimestamp| type| source ---|---|--- 2026-08-18 22:11:11+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfacbjh472f 2026-08-19 00:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfimi6ldq2p 2026-08-19 16:45:37+00:00| seen|...

CVE-2026-60782

creationtimestamp| type| source ---|---|--- 2026-08-18 22:10:24+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfaaulyqa25 2026-08-19 00:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfgwudmgv24 2026-08-19 16:52:25+00:00| seen|...

CVE-2026-60754

creationtimestamp| type| source ---|---|--- 2026-08-18 22:10:15+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfaalm6vm2u 2026-08-19 00:10:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfgwsx3de2f 2026-08-19 17:52:43+00:00| seen|...

CVE-2026-70920

creationtimestamp| type| source ---|---|--- 2026-08-18 22:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfaaccppa2e 2026-08-18 22:23:04+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfaxhj2oy2p 2026-08-19 17:51:53+00:00| seen|...

CVE-2026-60728

creationtimestamp| type| source ---|---|--- 2026-08-18 22:09:49+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfa7szuen2t 2026-08-18 23:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfft3kvsk2p 2026-08-19 17:15:19+00:00| seen|...

WordPress HashBar – WordPress Notification Bar plugin <= 2.0.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Brian Willows in WordPress Plugin HashBar – WordPress Notification Bar versions = 2.0.0...

MINI-FGCM-XW47-G9G5

Bulletin has no description...

MINI-6MXG-9RQ2-R3G6

Bulletin has no description...

CVE-2026-73930

creationtimestamp| type| source ---|---|--- 2026-08-18 22:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtf7pmeark2t 2026-08-18 22:29:21+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfbcr4kzg2j 2026-08-19 10:20:05+00:00| seen|...

CVE-2026-21580

Confluence Data Center and Server versions 7.1.1 through 10.2.0 are affected by a Critical (CVSS 9.3) Stored XSS, privilege escalation, and security misconfiguration issue exploitable by unauthenticated attackers. Atlassian recommends upgrading to 9.2.21 or 10.2.13 or later; no in-the-wild exploi...

CVE-2026-21580

This Critical severity Stored XSS, PrivEsc Privilege Escalation, and Security Misconfiguration vulnerability was introduced in versions 7.1.1, 7.4.0, 7.13.0, 7.17.0, 7.19.0, 8.0.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and 10.2.0 of Confluence Data Center and...

CVE-2026-55209

creationtimestamp| type| source ---|---|--- 2026-08-18 21:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtf6km7e322t...

CVE-2026-12359

creationtimestamp| type| source ---|---|--- 2026-08-18 21:37:05+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtf6fcetnl23...

CVE-2026-55107

creationtimestamp| type| source ---|---|--- 2026-08-18 21:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtf5yq2fzd2j 2026-08-18 22:35:38+00:00| published-proof-of-concept| https://github.com/elct9620/kobako/security/advisories/GHSA-7pwq-q9jf-539h...

CVE-2026-52873

In Streambert 2.5.0–2.6.0, the wyzie-open-redeem IPC handler in index.js strips CSP headers from all responses in the partition:wyzie-redeem session and omits setWindowOpenHandler, allowing injected scripts in sub.wyzie.io or navigated pages to run unconstrained, invoke renderer-exposed functions...

CVE-2026-52873 Streambert: Global CSP Removal in Wyzie Redeem Window Enables Unconstrained XSS in Electron Renderer

Streambert is a cross-platform Electron Desktop App to stream and download video content. From version 2.5.0 until version 2.6.0, the wyzie-open-redeem IPC handler in index.js creates the partition:wyzie-redeem Electron session and registers an onHeadersReceived hook that removes the...

EUVD-2026-62197

Streambert is a cross-platform Electron Desktop App to stream and download video content. From version 2.5.0 until version 2.6.0, the wyzie-open-redeem IPC handler in index.js creates the partition:wyzie-redeem Electron session and registers an onHeadersReceived hook that removes the...

CVE-2026-71150

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-71145

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-71142

Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications component: Security Component. Supported versions that are affected are 7.5.0-7.5.1, 7.6.0-7.8.0 and 8.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access...