CVE-2025-68637

The Uniffle HTTP client is configured to trust all SSL certificates and disable hostname verification by default, exposing REST API communications between the Uniffle CLI/client and the Uniffle Coordinator to potential MITM attacks. Affected: all versions prior to 0.10.0. Mitigation: upgrade to v...

CVE-2019-16209

A vulnerability, in The ReportsTrustManager class of Brocade SANnav versions before v2.0, could allow an attacker to perform a man-in-the-middle attack against Secure Sockets LayerSSLconnections...

CVE-2019-16546

Jenkins Google Compute Engine Plugin 4.1.1 and earlier does not verify SSH host keys when connecting agents created by the plugin, enabling man-in-the-middle attacks...

CVE-2006-3415

Tor before 0.1.1.20 uses improper logic to validate the "OR" destination, which allows remote attackers to perform a man-in-the-middle MITM attack via unspecified vectors...

CVE-2025-1099

This vulnerability exists in Tapo C500 Wi-Fi camera due to hard-coded RSA private key embedded within the device firmware. An attacker with physical access could exploit this vulnerability to obtain cryptographic private keys which can then be used to perform impersonation, data decryption and ma...

Malicious code in 1kzr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1191bf170b21e0c9c0b1904f808522aa27e23736bb05c9c16332fd1a97e52332 The package 1kzr was found to contain malicious code. Source: ghsa-malware 715d44ba7af24784970425367d9e909f00a7b64031c3004b2fe93628232ab95c Any...

Decision-Aware Trust Signal Alignment for SOC Alert Triage

Detection systems that utilize machine learning are progressively implemented at Security Operations Centers SOCs to help an analyst to filter through high volumes of security alerts. Practically, such systems tend to reveal probabilistic results or confidence scores which are ill-calibrated and...

PT-2026-1632

Name of the Vulnerable Software and Affected Versions The Niche Hero | Beautifully-designed blocks in seconds plugin for WordPress versions through 1.0.5 Description The plugin is susceptible to Stored Cross-Site Scripting due to inadequate input sanitization and output escaping. This allows...

Tarkov Data Manager 安全漏洞

Tarkov Data Manager is a database management tool from The Hideout open source. A security vulnerability exists in versions of Tarkov Data Manager prior to 02/01/2025, which stems from an authentication bypass at the login endpoint that could result in an unauthenticated user gaining administrato...

CVE-2025-60534

creationtimestamp| type| source ---|---|--- 2026-01-06 20:39:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbrsq6lfni2t 2026-01-06 20:40:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbrsqxzac22a...

CVE-2025-20797

creationtimestamp| type| source ---|---|--- 2026-01-06 20:13:20+00:00| seen| Telegram/PFrA7CJJ7CXBjBQDjwjiG1MpgnsXkm-Ij4iFje1tKThixY 2026-01-06 23:03:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbs2qygjae2m 2026-01-06 23:03:45+00:00| seen|...

CVE-2025-69086

creationtimestamp| type| source ---|---|--- 2026-01-06 17:22:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbrhp6squb2p 2026-01-06 17:22:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbrhqbfhez2z 2026-01-06 18:02:09+00:00| seen|...

CVE-2025-69352 WordPress The Events Calendar plugin <= 6.15.12.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in StellarWP The Events Calendar the-events-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Events Calendar: from n/a through = 6.15.12.2...

CVE-2025-69352

The CVE-2025-69352 entry concerns a Missing Authorization vulnerability in The Events Calendar plugin for WordPress (The Events Calendar) affecting versions up to and including 6.15.12.2. The underlying issue is Incorrect/Missing Access Control, allowing an attacker with LOW privileges and networ...

CVE-2025-69352 WordPress The Events Calendar plugin <= 6.15.12.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in StellarWP The Events Calendar the-events-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Events Calendar: from n/a through = 6.15.12.2...

CVE-2020-36917

iDS6 DSSPro Digital Signage System 6.2 contains a sensitive information disclosure vulnerability that allows remote attackers to intercept authentication credentials through cleartext cookie transmission. Attackers can exploit the autoSave feature to capture user passwords during man-in-the-middl...

CVE-2026-21485

creationtimestamp| type| source ---|---|--- 2026-01-06 04:39:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbq53azcfd2t 2026-01-06 05:03:26+00:00| published-proof-of-concept| Telegram/831nHCRtL2evt5rniei0FJReQqtzOwaiGXzkQTpqhGeUo2I...

CVE-2026-21677

creationtimestamp| type| source ---|---|--- 2026-01-06 04:39:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbq52zfgju2z 2026-01-06 05:03:39+00:00| seen| Telegram/1KywSS9pNEst0ZUnOIrrMzmRFjI63qMIXr1OzeZh2tlqF4 2026-01-06 08:04:10+00:00| seen|...

WordPress plugin The Events Calendar 安全漏洞

WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2026-1480

Name of the Vulnerable Software and Affected Versions StellarWP The Events Calendar versions through 6.15.12.2 Description A missing authorization issue exists in StellarWP The Events Calendar, allowing exploitation of incorrectly configured access control security levels. Recommendations Update...