CVE-2026-22242

creationtimestamp| type| source ---|---|--- 2026-01-08 13:19:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbw33r2xqv2r...

EUVD-2026-1567

A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations. Please note: authentication is not required in order to exploit this vulnerability...

CVE-2025-68887

creationtimestamp| type| source ---|---|--- 2026-01-08 12:39:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbvyt2keeo2u 2026-01-08 17:14:54+00:00| seen| Telegram/UlThGoX58f6Wkop7awnZC8Rf8gpxLvneuRy9futglmX9vHQ...

CVE-2025-67914

creationtimestamp| type| source ---|---|--- 2026-01-08 11:01:29+00:00| seen| https://gist.github.com/Darkcrai86/07f5d4ef4b2851a5aba7de5c1c28ab24 2026-01-08 16:59:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbwhfcznii2t 2026-01-08 17:00:29+00:00| seen|...

EUVD-2026-1575

When doing SSH-based transfers using either SCP or SFTP, and setting the knownhosts file, libcurl could still mistakenly accept connecting to hosts not present in the specified file if they were added as recognized in the libssh global knownhosts file...

EUVD-2026-1576

Missing Authorization vulnerability in G5Theme Zorka zorka allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zorka: from n/a through = 1.5.7...

EUVD-2026-1544

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in purethemes Listeo Core listeo-core allows Reflected XSS.This issue affects Listeo Core: from n/a through 2.0.19...

EUVD-2026-1542

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in themesuite Automotive Listings automotive allows Blind SQL Injection.This issue affects Automotive Listings: from n/a through = 18.6...

EUVD-2026-1540

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Neo Ocular neoocular allows PHP Local File Inclusion.This issue affects Neo Ocular: from n/a through 1.2...

EUVD-2026-1523

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Astoundify Jobify jobify allows Reflected XSS.This issue affects Jobify: from n/a through = 4.3.0...

EUVD-2026-1549

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WofficeIO Woffice woffice allows Reflected XSS.This issue affects Woffice: from n/a through = 5.4.30...

EUVD-2026-1543

Path Traversal: '.../...//' vulnerability in beeteam368 VidMov vidmov allows Path Traversal.This issue affects VidMov: from n/a through = 2.3.8...

EUVD-2026-1548

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RiceTheme Felan Framework felan-framework allows SQL Injection.This issue affects Felan Framework: from n/a through = 1.1.3...

EUVD-2026-1545

Authentication Bypass Using an Alternate Path or Channel vulnerability in RiceTheme Felan Framework felan-framework allows Authentication Abuse.This issue affects Felan Framework: from n/a through = 1.1.3...

EUVD-2026-1551

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in vanquish WooCommerce Orders & Customers Exporter woocommerce-orders-ei allows SQL Injection.This issue affects WooCommerce Orders & Customers Exporter: from n/a through = 5.4...

CVE-2025-14429 WordPress AeroLand theme <= 1.6.6 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeMove AeroLand aeroland allows PHP Local File Inclusion.This issue affects AeroLand: from n/a through = 1.6.6...

EUVD-2026-1533

Missing Authorization vulnerability in Kaira Blockons blockons allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Blockons: from n/a through = 1.2.15...

EUVD-2026-1457

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in magentech Rozy - Flower Shop rozy allows PHP Local File Inclusion.This issue affects Rozy - Flower Shop: from n/a through = 1.2.25...

RHSA-2026:0225

creationtimestamp| type| source ---|---|--- 2026-01-08 07:59:53+00:00| seen| https://gist.github.com/Darkcrai86/599f72da8d906520e6ed3c9912224929...

EUVD-2026-1585

A vulnerability was found in code-projects Intern Membership Management System 1.0. This impacts an unknown function of the file /intern/admin/editactivity.php. Performing a manipulation of the argument activityid results in sql injection. Remote exploitation of the attack is possible. The exploi...