48582 matches found
CVE-2026-65400
creationtimestamp| type| source ---|---|--- 2026-08-06 19:12:31+00:00| seen| https://infosec.exchange/users/wdormann/statuses/117050150130082823 2026-08-06 19:12:43+00:00| seen| https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3msgqpugd53h2 2026-08-07 01:54:06+00:00| seen|...
kernel security, bug fix, and enhancement update
An update is available for kernel. This update affects Rocky Linux SIG Cloud 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux...
CVE-2026-16619 miniOrange 2FA < 6.2.8 - 2FA Bypass via Unlimited Second-Factor Attempts
The miniOrange 2FA WordPress plugin before 6.2.8 does not correctly limit the number of second-factor verification attempts, tracking them against a client-supplied identifier that is reissued on every login, allowing an attacker who already knows a user's password to guess the one-time code...
CVE-2026-16619
The CVE-2026-16619 entry affects the miniOrange 2FA WordPress plugin, specifically versions before 6.2.8. The vulnerability arises because the plugin does not properly limit second-factor verification attempts; it tracks attempts using a client-supplied identifier that is reissued on every login,...
CVE-2026-34501
creationtimestamp| type| source ---|---|--- 2026-08-06 17:08:47+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117049663595472694 2026-08-06 20:17:59+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/7nebdrb66nk2l...
CVE-2026-13399
The CVE refers to the WordPress PayPal WooCommerce Payment Plugins prior to version 2.0.20, which contains an authorization check flaw on a REST endpoint that allows unauthenticated users to bypass payments. Affected component: Payment Plugins for PayPal WooCommerce (WordPress plugin). Root cause...
CVE-2026-11976
MonsterInsights Pro updates 10.2.0 and 10.2.2 were distributed from the official update bucket and contain a malicious file, class-system-check.php, due to a compromised AWS S3 bucket. Three distinct variants were observed on 2026-06-11, all using the same AES-256-GCM key, indicating a single thr...
CVE-2026-56846
A flaw was found in Node.js's handling of HTTP/2. This vulnerability allows a remote attacker to bypass maxSessionMemory limits by sending specially crafted HTTP/2 retained header blocks. This can lead to memory exhaustion, resulting in a denial of service DoS for the affected system. Mitigation ...
CVE-2026-43622
creationtimestamp| type| source ---|---|--- 2026-08-06 16:22:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/detkkxrgg2ojd 2026-08-06 19:00:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgpzhgv6y2n...
CVE-2026-53985
creationtimestamp| type| source ---|---|--- 2026-08-06 16:20:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3fddtrz4hv643 2026-08-06 17:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgjear6dd2n...
CVE-2026-66709
creationtimestamp| type| source ---|---|--- 2026-08-06 16:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msggxseog32p 2026-08-06 21:01:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgws3k3xd2l...
New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs
An unprivileged Linux program can time a hardware interrupt to land in the gap between a processor sanitizing its branch predictor and the kernel using it, re-poisoning the predictor after the defense has run. MIT CSAIL researchers Daniël Trujillo and Mengjia Yan named the technique INTERRUPT...
CVE-2026-66665
creationtimestamp| type| source ---|---|--- 2026-08-06 16:16:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msggub7o5a2l 2026-08-06 21:01:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgwsbzoi52t...
CVE-2026-66710
creationtimestamp| type| source ---|---|--- 2026-08-06 16:01:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgfzgsj2h2z 2026-08-06 16:08:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/clljb6nruttbm...
CVE-2026-61466
creationtimestamp| type| source ---|---|--- 2026-08-06 15:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgffrr5pn2s 2026-08-06 21:05:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/4hv3t36k4hvzo 2026-08-07 09:37:07+00:00| seen|...
CVE-2026-63687
creationtimestamp| type| source ---|---|--- 2026-08-06 15:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgffqh7u42u 2026-08-06 21:11:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/fqsngttlj2rzl 2026-08-07 10:07:06+00:00| seen|...
CVE-2026-57817
creationtimestamp| type| source ---|---|--- 2026-08-06 15:46:15+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgf6n2duc2o 2026-08-06 20:51:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/h7sikdbbfri6u...
CVE-2026-66909
creationtimestamp| type| source ---|---|--- 2026-08-06 15:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgf6ln3fh2l 2026-08-06 20:45:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/5h65hmmkj3bok 2026-08-07 04:37:07+00:00| seen|...
