29910 matches found
GHSA-R899-H629-J84R
creationtimestamp| type| source ---|---|--- 2026-07-11 17:07:04+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqf5lh6gov2x...
CVE-2026-15480
creationtimestamp| type| source ---|---|--- 2026-07-11 15:38:28+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116902088383530926 2026-07-12 06:52:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqglom7dkg2w 2026-07-12 07:00:32+00:00| seen|...
CVE-2026-15484
creationtimestamp| type| source ---|---|--- 2026-07-11 12:30:42+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116901350103809605 2026-07-12 07:30:23+00:00| seen| https://infosec.exchange/users/offseq/statuses/116905831499436002 2026-07-12 07:30:25+00:00| seen|...
CVE-2026-4661
The WP CTA – Sticky CTA Builder, Generate Leads, Promote Sales plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'fildname' parameter in all versions up to, and including, 2.2.2. This is due to insufficient escaping of user-supplied column names in the ajaxCheck method...
CVE-2025-5017
The Catalyst Connect Zoho CRM Client Portal plugin for WordPress is vulnerable to time-based SQL Injection via the ‘uid’ parameter in all versions up to, and including, 2.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query...
SUSE-SU-2026:2862-1 Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.54 fixes various security issues The following security issues were fixed: - CVE-2026-43501: ipv6: rpl: reserve maclen headroom when recompressed SRH grows bsc1266015. - CVE-2026-45970: bonding: alb: fix UAF in rlbarprecv during bond...
RLSA-2026:36365 Important: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: fs/smb/client: fix out-of-bounds read in cifssanitizeprepath CVE-2026-43112 For more details about the security issues, including...
kernel-rt security update
An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel-rt packages provide the Real Time Linux Kernel, which enables...
CVE-2025-13968
creationtimestamp| type| source ---|---|--- 2026-07-11 05:36:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdwypr5sv2z 2026-07-14 00:04:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkvt3q5sg2a...
EUVD-2026-43157
The WP CTA – Sticky CTA Builder, Generate Leads, Promote Sales plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'fildname' parameter in all versions up to, and including, 2.2.2. This is due to insufficient escaping of user-supplied column names in the ajaxCheck method...
CVE-2026-4661
The CVE-2026-4661 entry concerns the WordPress plugin WP CTA – Sticky CTA Builder, Generate Leads, Promote Sales (versions up to 2.2.2). The flaw is a time-based blind SQL injection in the fildname parameter, caused by insufficient escaping of user-supplied column names in ajaxCheck() and an inco...
CVE-2026-4661 WP CTA <= 2.2.2 - Unauthenticated Time-Based Blind SQL Injection via 'fildname' Parameter
The WP CTA – Sticky CTA Builder, Generate Leads, Promote Sales plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'fildname' parameter in all versions up to, and including, 2.2.2. This is due to insufficient escaping of user-supplied column names in the ajaxCheck method...
CVE-2025-5017
Summary: The Catalyst Connect Zoho CRM Client Portal WordPress plugin (≤ 2.2.0) is vulnerable to time-based SQL Injection via the uid parameter. The root cause is insufficient escaping of user input and lack of proper query parameterization, enabling authenticated attackers with Administrator-lev...
CVE-2025-5017 Catalyst Connect Zoho CRM Client Portal <= 2.2.0 - Authenticated (Administrator+) SQL Injection via uid Parameter
The Catalyst Connect Zoho CRM Client Portal plugin for WordPress is vulnerable to time-based SQL Injection via the ‘uid’ parameter in all versions up to, and including, 2.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query...
CVE-2026-59213
creationtimestamp| type| source ---|---|--- 2026-07-11 01:30:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdjbip7kq2y 2026-07-24 22:35:49+00:00| seen| https://gist.github.com/alon710/9bcf9d1bd3d7650ebf44f14eff2dc08a...
[SECURITY] Fedora 44 Update: prometheus-3.13.0-1.fc44
The Prometheus monitoring system and time series database...
[SECURITY] Fedora 43 Update: prometheus-3.13.0-1.fc43
The Prometheus monitoring system and time series database...
GHSA-G5R6-GV6M-F5JV
creationtimestamp| type| source ---|---|--- 2026-07-11 00:42:57+00:00| seen| https://gist.github.com/alon710/1f4d78a54bd12c1ceab970579e216233...