48225 matches found
CVE-2026-65400
creationtimestamp| type| source ---|---|--- 2026-08-06 19:12:31+00:00| seen| https://infosec.exchange/users/wdormann/statuses/117050150130082823 2026-08-06 19:12:43+00:00| seen| https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3msgqpugd53h2 2026-08-07 01:54:06+00:00| seen|...
kernel security, bug fix, and enhancement update
An update is available for kernel. This update affects Rocky Linux SIG Cloud 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux...
CVE-2026-16619 miniOrange 2FA < 6.2.8 - 2FA Bypass via Unlimited Second-Factor Attempts
The miniOrange 2FA WordPress plugin before 6.2.8 does not correctly limit the number of second-factor verification attempts, tracking them against a client-supplied identifier that is reissued on every login, allowing an attacker who already knows a user's password to guess the one-time code...
CVE-2026-16619
The CVE-2026-16619 entry affects the miniOrange 2FA WordPress plugin, specifically versions before 6.2.8. The vulnerability arises because the plugin does not properly limit second-factor verification attempts; it tracks attempts using a client-supplied identifier that is reissued on every login,...
CVE-2026-13399
The CVE refers to the WordPress PayPal WooCommerce Payment Plugins prior to version 2.0.20, which contains an authorization check flaw on a REST endpoint that allows unauthenticated users to bypass payments. Affected component: Payment Plugins for PayPal WooCommerce (WordPress plugin). Root cause...
CVE-2026-11976
MonsterInsights Pro updates 10.2.0 and 10.2.2 were distributed from the official update bucket and contain a malicious file, class-system-check.php, due to a compromised AWS S3 bucket. Three distinct variants were observed on 2026-06-11, all using the same AES-256-GCM key, indicating a single thr...
CVE-2026-56846
A flaw was found in Node.js's handling of HTTP/2. This vulnerability allows a remote attacker to bypass maxSessionMemory limits by sending specially crafted HTTP/2 retained header blocks. This can lead to memory exhaustion, resulting in a denial of service DoS for the affected system. Mitigation ...
New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs
An unprivileged Linux program can time a hardware interrupt to land in the gap between a processor sanitizing its branch predictor and the kernel using it, re-poisoning the predictor after the defense has run. MIT CSAIL researchers Daniël Trujillo and Mengjia Yan named the technique INTERRUPT...
CVE-2026-61466
creationtimestamp| type| source ---|---|--- 2026-08-06 15:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgffrr5pn2s 2026-08-06 21:05:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/4hv3t36k4hvzo 2026-08-07 09:37:07+00:00| seen|...
CVE-2026-63687
creationtimestamp| type| source ---|---|--- 2026-08-06 15:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgffqh7u42u 2026-08-06 21:11:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/fqsngttlj2rzl 2026-08-07 10:07:06+00:00| seen|...
CVE-2026-57817
creationtimestamp| type| source ---|---|--- 2026-08-06 15:46:15+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgf6n2duc2o 2026-08-06 20:51:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/h7sikdbbfri6u...
CVE-2026-66909
creationtimestamp| type| source ---|---|--- 2026-08-06 15:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgf6ln3fh2l 2026-08-06 20:45:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/5h65hmmkj3bok 2026-08-07 04:37:07+00:00| seen|...
CVE-2026-66709
Shop manager Remote Code Execution RCE in CTX Feed = 6.6.42 versions...
CVE-2026-66665
Unauthenticated Arbitrary File Upload in Type Hub = 2.0.6 versions...
CVE-2026-66685
Unauthenticated Sensitive Data Exposure in Featured Video Plus = 2.3.3 versions...
CVE-2026-65560
Unauthenticated Cross Site Scripting XSS in Houzez Property Feed = 2.5.48 versions...
CVE-2026-65569
Subscriber SQL Injection in WP Job Portal = 2.5.6 versions...
CVE-2026-65517
Unauthenticated Cross Site Scripting XSS in Easy PayPal Buy Now Button = 2.0.4 versions...