CVE-2025-71166

Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting XSS vulnerability in the administrative interface within the Tools Status move message handling. The path parameter is reflected into the HTML output without proper output encoding in...

CVE-2025-71165

Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting XSS vulnerability in the administrative interface within the Tools Status functionality. The path parameter is reflected into the HTML response without proper output encoding in include/admin/Tools/Status.php...

Exploit for CVE-2026-23550

CYBERDUDEBIVASH Modular DS CVE-2026-23550 Detector Overvie...

CVE-2025-70656

creationtimestamp| type| source ---|---|--- 2026-01-15 17:20:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115900259443300481...

CVE-2025-71130

creationtimestamp| type| source ---|---|--- 2026-01-15 16:26:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115900047111207536 2026-05-10 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260511...

CVE-2021-47760

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as a duplicate...

CVE-2026-22645

creationtimestamp| type| source ---|---|--- 2026-01-15 15:12:34+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115899757567671679...

CVE-2026-22642

creationtimestamp| type| source ---|---|--- 2026-01-15 15:12:34+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115899757567671679...

CVE-2026-22637

creationtimestamp| type| source ---|---|--- 2026-01-15 15:12:33+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115899757567671679...

CVE-2026-0713

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2025-71109

creationtimestamp| type| source ---|---|--- 2026-01-15 09:54:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115898507140684921 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-05-10 18:00:00+00:00| seen|...

CVE-2025-15475

The PayHere Payment Gateway Plugin for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to an improper validation logic in the checkpayhereresponse function in all versions up to, and including, 2.3.9. This makes it possible for unauthenticated attackers to...

CVE-2025-15513

The Float Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to improper error handling in the verifyFloatResponse function in all versions up to, and including, 1.1.9. This makes it possible for unauthenticated attackers to mark any WooCommerce order as...

CVE-2026-0421

creationtimestamp| type| source ---|---|--- 2026-01-15 00:29:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcgdctd2lp2e...

SUSE CVE-2025-68809

In the Linux kernel, the following vulnerability has been resolved: ksmbd: vfs: fix race on mflags in vfscache ksmbd maintains delete-on-close and pending-delete state in ksmbdinode-mflags. In vfscache.c this field is accessed under inconsistent locking: some paths read and modify mflags under...

SUSE CVE-2026-0904

Incorrect security UI in Digital Credentials in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Chromium security severity: Medium...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002342)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002342 advisory. The signal implementation in the Linux kernel before 4.3.5 on powerpc platforms does not check for an MSR with both the S and T bits set, which allows local users to...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003116)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003116 advisory. An issue was discovered in the Linux kernel before 4.18.6. An information leak in cdromioctldrivestatus in drivers/cdrom/cdrom.c could be used by local attackers to...

CVE-2026-22852

creationtimestamp| type| source ---|---|--- 2026-01-14 20:02:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcfuelgoe72x...

CVE-2025-71165

Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting XSS vulnerability in the administrative interface within the Tools Status functionality. The path parameter is reflected into the HTML response without proper output encoding in include/admin/Tools/Status.php...