9219 matches found
EUVD-2026-2521
Lack of authorization of the InputManager D-Bus interface in InputPlumber versions before v0.63.0 can lead to local Denial-of-Service, information leak or even privilege escalation in the context of the currently active user session...
CVE-2026-0532
creationtimestamp| type| source ---|---|--- 2026-01-14 11:32:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcexvfk7ba2x 2026-01-14 12:01:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcezj5w3532z 2026-01-14 12:01:39+00:00| seen|...
CVE-2025-71085
In the Linux kernel, the following vulnerability has been resolved: ipv6: BUG in pskbexpandhead as part of calipsoskbuffsetattr There exists a kernel oops caused by a BUGONnhead INTMAX i.e. intskbheadroomskb + lendelta skbheadroomskb is meant to ensure that delta = headroom - skbheadroomskb is...
RHSA-2026:0489
creationtimestamp| type| source ---|---|--- 2026-01-14 07:43:21+00:00| seen| https://gist.github.com/Darkcrai86/dd3896dbf37c80f0e4ff392811b02894...
RHSA-2026:0513
creationtimestamp| type| source ---|---|--- 2026-01-14 07:42:28+00:00| seen| https://gist.github.com/Darkcrai86/1ca4a73e35372d68102e855105545c5c...
RHSA-2026:0533
creationtimestamp| type| source ---|---|--- 2026-01-14 07:41:21+00:00| seen| https://gist.github.com/Darkcrai86/25a07d49e1f995bc8a92840f5a415069...
CVE-2025-14880
creationtimestamp| type| source ---|---|--- 2026-01-14 07:33:51+00:00| seen| https://gist.github.com/Darkcrai86/3cf87130e39d81eecc29c38770fa8308 2026-01-14 08:06:58+00:00| seen| https://gist.github.com/Darkcrai86/b699c34f24359e7696cb78359669ab59...
CVE-2025-14854
creationtimestamp| type| source ---|---|--- 2026-01-14 07:30:29+00:00| seen| https://gist.github.com/Darkcrai86/8df70e28a6a23dbe9011c643a897f490 2026-01-14 08:03:12+00:00| seen| https://gist.github.com/Darkcrai86/97bdc78c864f7bd6bee2dbb77d502b06...
EUVD-2026-2527
The Stopwords for comments plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing nonce validation on the 'setstopwordsforcomments' and 'deletestopwordsforcomments' functions. This makes it possible for unauthenticated...
EUVD-2026-2555
The GetContentFromURL plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.0. This is due to the plugin using wpremoteget instead of wpsaferemoteget to fetch content from a user-supplied URL in the 'url' parameter of the gcfu shortcode. This...
EUVD-2026-2551
The GeekyBot — Generate AI Content Without Prompt, Chatbot and Lead Generation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the chat message field in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping. This makes it possibl...
EUVD-2026-2543
The Gotham Block Extra Light plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.5.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...
EUVD-2026-2556
The PDF Resume Parser plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0. This is due to the plugin registering an AJAX action handler that is accessible to unauthenticated users and exposes SMTP configuration data including credentials...
CVE-2026-0635
The CVE concerns the WordPress plugin Responsive Accordion Slider. A missing capability check in the resp_accordion_silder_save_images function in all versions up to and including 1.2.2 allows authenticated attackers with Contributor-level access or higher to modify any slider’s image metadata (t...
EUVD-2026-2539
The Responsive Accordion Slider plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'respaccordionsildersaveimages' function in all versions up to, and including, 1.2.2. This makes it possible for authenticated attackers, with...
EUVD-2026-2535
The SearchWiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post titles in search results in all versions up to, and including, 1.0.0. This is due to the plugin using escattr instead of eschtml when outputting post titles in search results. This makes it possible for...
EUVD-2026-2547
The LottieFiles – Lottie block for Gutenberg plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.0 via the /wp-json/lottiefiles/v1/settings/ REST API endpoint. This makes it possible for unauthenticated attackers to retrieve the site...
CVE-2025-12051
creationtimestamp| type| source ---|---|--- 2026-01-14 04:20:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mce7q7kzha2b...