CVE-2026-80726

creationtimestamp| type| source ---|---|--- 2026-09-03 08:45:43+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117206230142963451 2026-09-04 05:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muoabrau2k2p...

CVE-2026-84796

creationtimestamp| type| source ---|---|--- 2026-09-03 04:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mulmzieyi725...

GHSA-QH9R-J7RP-4X2M

creationtimestamp| type| source ---|---|--- 2026-09-03 03:32:56+00:00| seen| https://gist.github.com/alon710/4cc3ecb49324472f51ec38f524b61b28...

CVE-2023-46020

creationtimestamp| type| source ---|---|--- 2026-09-03 03:00:05+00:00| seen| Telegram/mTdAl69kQYNmN8ZbeHUpTeji-nFgbg7kT5XkeMcaNuMn6uI 2026-09-04 00:01:03+00:00| published-proof-of-concept| Telegram/mTdAl69kQYNmN8ZbeHUpTeji-nFgbg7kT5XkeMcaNuMn6uI...

PT-2026-85203

A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function Order::pupdate of the file /rider/orders/controller.php?action=edit&actions=confirm of the component Order Status Update. The manipulation of the argument ID lead...

CVE-2026-85187: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function Order::pupdate of the file /rider/orders/controller.php?action=edit&actions=confirm of the component Order Status Update. The manipulation of the argument ID lead...

CVE-2026-71963: Improper Neutralization of Special Elements used in an OS Command

Hermes Agent 0.18.2 through 0.21.0, fixed in commit f6234d0, contains a remote code execution vulnerability that allows attackers to execute arbitrary OS commands by supplying a malicious repository with a crafted .git/config that sets core.fsmonitor to an attacker-controlled command. When a user...

YellowKey-Bitlocker-CVE-2026-45585 — Updated!

🛡️ YellowKey-Bitlocker-CVE-2026-45585 - Recover Your BitLocker Keys Safely 📋 What This Software Does YellowKey is a free open-source utility for Windows 10 and Windows 11. It helps you extract, backup, and view your BitLocker recovery keys. This is useful if you lost access to your encrypted drive...

ghostlock — Updated!

GhostLock — Linux kernel rtmutex/futex stack-UAF tracking site Source for the GhostLock patch-status tracker: a single-page site recording which distributions have shipped a fix for the rtmutex/futex stack use-after-free in the Linux kernel. Tracking concluded 2026-08-06 : every tracked kernel...

GHSA-FPH4-WMHF-6FWF

creationtimestamp| type| source ---|---|--- 2026-09-02 18:33:43+00:00| seen| https://gist.github.com/alon710/9abc2886db3d6d53b0a6da8c0c0bb7fc 2026-09-03 19:51:59+00:00| seen| https://gist.github.com/konard/414f6d2acf125677f96485ac80cd6a3e 2026-09-03 20:01:13+00:00| seen|...

CVE-2026-2811

creationtimestamp| type| source ---|---|--- 2026-09-02 16:24:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fdkyq6oplr7dl...

GHSA-8423-8FGW-73VQ

creationtimestamp| type| source ---|---|--- 2026-09-02 14:12:39+00:00| seen| https://gist.github.com/alon710/6ddd193ef693b085524dc4da97851f2c...

CVE-2026-76757 Gammu SMS Daemon - Critical - Unsupported - SA-CONTRIB-2026-100

Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions:...

CVE-2026-14199

creationtimestamp| type| source ---|---|--- 2026-09-02 12:23:23+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mujwgyfnd422...

ROOT-OS-DEBIAN-11-CVE-2026-34545 CVE-2026-34545 in openexr - Patched by Root

Root has patched CVE-2026-34545 in the openexr package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-78657

creationtimestamp| type| source ---|---|--- 2026-09-02 06:56:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ejhs4maroptlv 2026-09-02 07:01:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mujei2lwul2s 2026-09-02 08:07:11+00:00| seen|...

CVE-2026-81426

The WC Vendors WordPress plugin before 2.7.2.1 does not have CSRF protection on some of its front-end order shipment status actions, which could allow attackers to make a logged-in vendor change the shipment status of their own orders via a crafted request...

CVE-2026-81427

The WC Vendors WordPress plugin before 2.7.2.1 does not verify that the vendor submitting a front-end order shipment status change owns the referenced order, allowing any authenticated vendor to mark another vendor's order as shipped, add an order note falsely attributed to the victim vendor, and...

CVE-2026-81426

The WC Vendors WordPress plugin, in versions prior to 2.7.2.1 , is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The root cause is a lack of CSRF protection on specific front-end order shipment status actions. This flaw could allow an attacker to force a logged-in vendor to modify the...

CVE-2026-81426 WC Vendors < 2.7.2.1 - Order Shipment Status Change via CSRF

The WC Vendors WordPress plugin before 2.7.2.1 does not have CSRF protection on some of its front-end order shipment status actions, which could allow attackers to make a logged-in vendor change the shipment status of their own orders via a crafted request...