Exploit for Improper Authentication in Apache Tomcat

CVE-2026-29145 – Everything Apache Tomcat CLIENTCERT + OCS...

CVE-2026-6801

creationtimestamp| type| source ---|---|--- 2026-07-11 07:35:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqe5nejffn2e 2026-07-11 08:02:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqe76hgzi22x...

CVE-2026-11901

The WP Hotel Booking plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity in all versions up to, and including, 2.3.1. This is due to the webhookprocesspaypalstandard IPN handler selecting its PayPal validation endpoint from the attacker-controlled $REQUEST'testipn...

EUVD-2026-43151

The WP Easy Pay – Payment and Donation form Builder for Square plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

CVE-2026-12738 WP Easy Pay <= 4.5.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Status Modification via wpep_draft_confirm AJAX Action

The WP Easy Pay – Payment and Donation form Builder for Square plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

CVE-2026-12738 WP Easy Pay <= 4.5.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Status Modification via wpep_draft_confirm AJAX Action

The WP Easy Pay – Payment and Donation form Builder for Square plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

GHSA-99J7-FHR2-XFJ4

creationtimestamp| type| source ---|---|--- 2026-07-11 03:12:22+00:00| seen| https://gist.github.com/alon710/562c94e99a029c25882fbe479b6eb12d...

GHSA-XRMC-C5CG-RV7X

creationtimestamp| type| source ---|---|--- 2026-07-11 01:41:49+00:00| seen| https://gist.github.com/alon710/fc9075308a51fb0dcac943a4365a02d7...

CVE-2026-53038

creationtimestamp| type| source ---|---|--- 2026-07-11 01:33:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdjg2r4yi2y 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20261002...

MINI-9PHG-8383-2RG5

Bulletin has no description...

MINI-PPH4-X5PF-425F

Bulletin has no description...

CVE-2026-15053

creationtimestamp| type| source ---|---|--- 2026-07-11 00:40:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdggv6z7c2c...

GHSA-5XFX-XJ4H-5P7R

creationtimestamp| type| source ---|---|--- 2026-07-11 00:12:22+00:00| seen| https://gist.github.com/alon710/c12d56fc3c8087be09be97f40fd8c89a...

PT-2026-57410

The WP Hotel Booking plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity in all versions up to, and including, 2.3.1. This is due to the web hook process paypal standard IPN handler selecting its PayPal validation endpoint from the attacker-controlled $ REQUEST'te...

GHSA-G936-7JQJ-MWV8

creationtimestamp| type| source ---|---|--- 2026-07-10 22:12:05+00:00| seen| https://gist.github.com/alon710/3aab1c4181e03ef1803e74b755304657...

CVE-2026-56335

creationtimestamp| type| source ---|---|--- 2026-07-10 21:23:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd3gbkepx2y...

CVE-2026-57213

RabbitMQ is a messaging and streaming broker. Prior to 3.13.14, 4.0.19, 4.1.10, and 4.2.5, the rabbitmqfederationmanagement plugin renders the consumertag field on the Federation Status page without HTML escaping, allowing a user who can configure a federation upstream or policy to execute...

CVE-2026-57213

RabbitMQ is a messaging and streaming broker. Prior to 3.13.14, 4.0.19, 4.1.10, and 4.2.5, the rabbitmqfederationmanagement plugin renders the consumertag field on the Federation Status page without HTML escaping, allowing a user who can configure a federation upstream or policy to execute...

UBUNTU-CVE-2026-57213

RabbitMQ is a messaging and streaming broker. Prior to 3.13.14, 4.0.19, 4.1.10, and 4.2.5, the rabbitmqfederationmanagement plugin renders the consumertag field on the Federation Status page without HTML escaping, allowing a user who can configure a federation upstream or policy to execute...

CVE-2026-57213 RabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag rendering

RabbitMQ is a messaging and streaming broker. Prior to 3.13.14, 4.0.19, 4.1.10, and 4.2.5, the rabbitmqfederationmanagement plugin renders the consumertag field on the Federation Status page without HTML escaping, allowing a user who can configure a federation upstream or policy to execute...