9219 matches found
EUVD-2026-1269
The Simple User Meta Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the user meta value field in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
EUVD-2026-1285
The twinklesmtp – Email Service Provider For WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin's sender settings in all versions up to, and including, 1.03 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
EUVD-2026-1333
The HelpDesk contact form plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.5. This is due to missing or incorrect nonce validation on the handlequeryargs function. This makes it possible for unauthenticated attackers to update the plugin's...
CVE-2025-14059
creationtimestamp| type| source ---|---|--- 2026-01-07 06:29:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbstpd7mn62q 2026-01-07 08:29:25+00:00| seen| https://gist.github.com/Darkcrai86/2f1b6459b5d1fd9f5846d8fe26ade578...
BELL-CVE-2025-68764
Bulletin has no description...
BELL-CVE-2025-68751
Bulletin has no description...
CVE-2025-14599
creationtimestamp| type| source ---|---|--- 2026-01-07 03:01:30+00:00| seen| Telegram/ibWxRtBUDvxV1OEiTTPvcqviWUN2uN5UEbzlca3jMyzNOqg 2026-01-07 03:34:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbsjvjv4qu2y...
CVE-2022-23635 vulnerabilities
Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...
CVE-2025-57352 vulnerabilities
Vulnerabilities for packages: foxx-cli, grafana-image-renderer, opensearch-dashboards, opensearch-dashboards-fips...
EUVD-2026-1199
A file upload vulnerability in ARIS 10.0.23.0.3587512 allows attackers to execute arbitrary code via uploading a crafted PDF file/Malware...
📄 mrrb.bg Cross Site Scripting
The site at mrrb.bg suffers from a cross site scripting issue. The researcher has waited over a year after reporting this to make public, so hopefully this will encourage them to fix it. Titles: mrrb.bg-APP - XSS-Reflected Author: nu11secur1ty Date: 01/06/2026 Vendor: mrrb.bg Software: mrrb.bg...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000355)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000355 advisory. An issue was discovered in the Linux kernel through 5.3.9. There is a use-after-free when aalabelparse fails in aaauditruleinit in security/apparmor/audit.c. Tenable...
EUVD-2026-0963
Incorrect Privilege Assignment vulnerability in AA-Team Premium Age Verification / Restriction for WordPress, AA-Team Responsive Coming Soon Landing Page / Holding Page for WordPress allows Privilege Escalation.This issue affects Premium Age Verification / Restriction for WordPress: from n/a...
CVE-2025-69362
creationtimestamp| type| source ---|---|--- 2026-01-06 19:07:27+00:00| seen| Telegram/5veGiJvGsUhc9dGzExP3XDXSusiNY1vbpgmVDQc1udFyrC4 2026-01-06 20:34:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbrsgmtpld22 2026-01-07 08:35:43+00:00| seen|...
EUVD-2026-0984
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mojoomla WPCHURCH allows PHP Local File Inclusion.This issue affects WPCHURCH: from n/a through 2.7.0...
EUVD-2026-0990
wolfSSH’s key exchange state machine can be manipulated to leak the client’s password in the clear, trick the client to send a bogus signature, or trick the client into skipping user authentication. This affects client applications with wolfSSH version 1.4.21 and earlier. Users of wolfSSH must...
CVE-2025-69086
creationtimestamp| type| source ---|---|--- 2026-01-06 17:22:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbrhp6squb2p 2026-01-06 17:22:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbrhqbfhez2z 2026-01-06 18:02:09+00:00| seen|...
Cloud Agent in 2025: A Year of Scale, Security, and Smarter Visibility
As we move into 2026, 2025 stands out as a defining year for the Qualys Cloud Agent. In 2025, Cloud Agent delivered deeper visibility into running systems and applications , stronger security controls , expanded support across operating systems and architectures , and meaningful platform...
EUVD-2026-0987
Missing Authorization vulnerability in PublishPress Post Expirator post-expirator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Expirator: from n/a through = 4.9.3...