112580 matches found
CVE-2026-33256
creationtimestamp| type| source ---|---|--- 2026-04-22 12:22:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3iespefk2k 2026-04-27 06:39:30+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3mkhhkb2n4saf...
CVE-2026-33260
creationtimestamp| type| source ---|---|--- 2026-04-22 12:13:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3hvqcf4a2c...
EUVD-2026-24672
The WP Responsive Popup + Optin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.4. This is due to the settings form on the admin page wpoadminpage.php lacking nonce generation wpnoncefield and verification wpverifynonce/checkadminreferer. Thi...
CVE-2026-40448
creationtimestamp| type| source ---|---|--- 2026-04-22 09:17:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk362sawcr2k...
CVE-2026-4131
The WP Responsive Popup + Optin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.4. This is due to the settings form on the admin page wpoadminpage.php lacking nonce generation wpnoncefield and verification wpverifynonce/checkadminreferer. Thi...
CVE-2026-6842
creationtimestamp| type| source ---|---|--- 2026-04-22 08:38:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk33tv5nbq2q 2026-06-08 09:52:07+00:00| seen| https://bsky.app/profile/bob.mastodon.me.uk.ap.brid.gy/post/3mnrfv6yvmhg2...
CVE-2026-4131
The WP Responsive Popup + Optin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.4. This is due to the settings form on the admin page wpoadminpage.php lacking nonce generation wpnoncefield and verification wpverifynonce/checkadminreferer. Thi...
CVE-2026-4131 WP Responsive Popup + Optin <= 1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'wpo_image_url' Parameter
The WP Responsive Popup + Optin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.4. This is due to the settings form on the admin page wpoadminpage.php lacking nonce generation wpnoncefield and verification wpverifynonce/checkadminreferer. Thi...
CVE-2026-4131 WP Responsive Popup + Optin <= 1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'wpo_image_url' Parameter
The WP Responsive Popup + Optin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.4. This is due to the settings form on the admin page wpoadminpage.php lacking nonce generation wpnoncefield and verification wpverifynonce/checkadminreferer. Thi...
python: Python: Command-line option injection in webbrowser.open() via crafted URLs
A flaw was found in Python. The webbrowser.open API, used to launch web browsers, does not properly sanitize input. This allows a remote attacker to craft a malicious URL containing leading dashes. When such a URL is opened, certain web browsers may interpret these dashes as command-line options,...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.19 security and extras update
Red Hat OpenShift Container Platform release 4.20.19 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a security impact of...
GHSA-4VRC-J85C-598C Spring Security Doesn't Correctly Include Servlet Path in Path Matching of XML Authorization Rules
Vulnerability in Spring Spring Security. If an application uses to define the servlet path for computing a path matcher, then the servlet path is not included and the related authorization rules are not exercised. This can lead to an authorization bypass. This issue affects Spring Security: from...
EUVD-2026-24612
Vulnerability in Spring Spring Security. If an application uses to define the servlet path for computing a path matcher, then the servlet path is not included and the related authorization rules are not exercised. This can lead to an authorization bypass.This issue affects Spring Security: from...
CVE-2026-22754
Vulnerability in Spring Spring Security. If an application uses to define the servlet path for computing a path matcher, then the servlet path is not included and the related authorization rules are not exercised. This can lead to an authorization bypass.This issue affects Spring Security: from...
python: Python: Command-line option injection in webbrowser.open() via crafted URLs
A flaw was found in Python. The webbrowser.open API, used to launch web browsers, does not properly sanitize input. This allows a remote attacker to craft a malicious URL containing leading dashes. When such a URL is opened, certain web browsers may interpret these dashes as command-line options,...
CVE-2026-22754 ervlet Path Not Correctly Included in Path Matching of XML Authorization Rules
Vulnerability in Spring Spring Security. If an application uses to define the servlet path for computing a path matcher, then the servlet path is not included and the related authorization rules are not exercised. This can lead to an authorization bypass.This issue affects Spring Security: from...
CVE-2026-6833
creationtimestamp| type| source ---|---|--- 2026-04-22 04:36:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2oe56pug2k...
CVE-2026-40344
creationtimestamp| type| source ---|---|--- 2026-04-22 03:09:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2jhjnulk2q 2026-04-22 03:15:49+00:00| published-proof-of-concept| Telegram/NIz4Hq2d69t6fRYm4ZcrXWZIskbJKFNbLYHbUSSyCcR9Mzg...
CVE-2026-42284
creationtimestamp| type| source ---|---|--- 2026-04-22 02:45:11+00:00| published-proof-of-concept| https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-x2qx-6953-8485 2026-05-07 19:53:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlbylh62rw2e...