CVE-2026-15019

creationtimestamp| type| source ---|---|--- 2026-09-10 06:01:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv5etlagw22m...

CVE-2026-87820

creationtimestamp| type| source ---|---|--- 2026-09-10 06:00:06+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-87820.yaml 2026-09-11 00:00:04+00:00| confirmed|...

CVE-2026-87853

creationtimestamp| type| source ---|---|--- 2026-09-10 05:06:29+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117245004263622513...

CVE-2026-87924

creationtimestamp| type| source ---|---|--- 2026-09-09 23:52:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4eykrwmqpgb3r...

USTP-Secure

USTP USTP means UDP Speedy Transmission Protocol. USTP keeps the same authenticated transport model, but the project name is now simply USTP again. By default, USTP uses AEAD for DATA. It also supports an optional negotiated cleartext + HMAC mode for DATA, where payload bytes are visible on the...

CVE-2026-82563

An attacker could impersonate the camera and place themselves in a man-in-the-middle or device-emulation position. This permits manipulation of device status responses, observation of application requests, and potential triggering of firmware-update behavior...

EUVD-2026-75053

An attacker could impersonate the camera and place themselves in a man-in-the-middle or device-emulation position. This permits manipulation of device status responses, observation of application requests, and potential triggering of firmware-update behavior...

CVE-2025-63585

CVE-2025-63585 Inyección SQL ciega basada en tiempo en /action/rtcomments/status parámetro: timestamp Se encontró una vulnerabilidad de inyección SQL ciega basada en tiempo en el parámetro timestamp del endpoint /action/rtcomments/status. Un atacante autenticado que pueda proporcionar este...

CVE-2026-79641

creationtimestamp| type| source ---|---|--- 2026-09-09 12:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv3igwbtaf23...

CVE-2026-79973

creationtimestamp| type| source ---|---|--- 2026-09-09 09:46:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hqkrahgnc6b4r...

CVE-2020-8554

Crear clúster de Kubernetes root@kitploit: kind create cluster --config ./kind.yaml El clúster debe tener certmanager: https://cert-manager.io/docs/installation/kubernetes/ Probar la vulnerabilidad root@kitploit: kubectl apply -f - 'EOF' apiVersion: v1 kind: Namespace metadata: name: kubeproxy-mi...

CVE-2026-84392

creationtimestamp| type| source ---|---|--- 2026-09-09 08:09:28+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117240061489453521 2026-09-11 13:55:10+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvaprcwds62r...

EUVD-2026-74760

The Eventin – Event Calendar, Event Registration, Tickets & Booking AI Powered plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.1.22. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it...

CVE-2026-15398

The Eventin WordPress plugin (Event Calendar, Event Registration, Tickets & Booking, AI Powered) is vulnerable to an authorization bypass in all versions up to and including 4.1.22 . The root cause is improper authorization verification in the OrderController , where the wp_rest nonce is publicly...

CVE-2025-25257

Probador de Vulnerabilidad CVE-2025-25257 de Fortinet FortiWeb Descripción Este script de PowerShell está diseñado únicamente para pruebas de penetración autorizadas. Prueba los dispositivos Fortinet FortiWeb para CVE-2025-25257, una vulnerabilidad de inyección SQL no autenticada en el endpoint...

CVE-2026-87734

creationtimestamp| type| source ---|---|--- 2026-09-09 05:52:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cccrnwlzgl642 2026-09-09 09:02:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv36hrh2uz2w 2026-09-09 11:12:16+00:00| seen|...

CVE-2025-61803

creationtimestamp| type| source ---|---|--- 2026-09-09 05:00:17+00:00| seen| https://t.me/IntelEncyclopedia/1370 2026-09-10 00:00:25+00:00| seen| https://t.me/IntelEncyclopedia/1370...

CVE-2026-11991

creationtimestamp| type| source ---|---|--- 2026-09-09 05:00:06+00:00| seen| https://t.me/GithubRedTeam/101547 2026-09-10 00:00:49+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/101547...

CVE-2026-28660

creationtimestamp| type| source ---|---|--- 2026-09-09 04:47:13+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...

CVE-2026-19800

The Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to SQL Injection via the 'status' parameter in all versions up to, and including, 1.31.0 due to insufficient escaping on the user supplied parameter and lack of sufficient...