{"vulnerability": "CVE-2026-6665", "sightings": [{"uuid": "0d6ddcbd-3be4-4c22-ab66-8f46787b6902", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6665", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlffnzarsx2i", "content": "CVE-2026-6665 - PgBouncer buffer overflow in SCRAM\nCVE ID : CVE-2026-6665\n \n Published : May 9, 2026, 1:16 a.m. | 3\u00a0hours, 4\u00a0minutes ago\n \n Description : The SCRAM code in PgBouncer before 1.25.2 did not check the return value of strlcat() correctly when building the contents ...", "creation_timestamp": "2026-05-09T04:25:41.269235Z"}, {"uuid": "b8774b09-43cb-4f51-ab62-0a550467bf44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6665", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlgsgh3l6j2n", "content": "\ud83d\udfe0 CVE-2026-6665 - High (8.1)\n\nThe SCRAM code in PgBouncer before 1.25.2 did not check the return value of strlcat() correctly w...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-6665/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-09T17:46:47.650718Z"}, {"uuid": "c19c0b5e-7153-49cc-bffa-969b7491f516", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6665", "type": "seen", "source": "https://bsky.app/profile/pgexperts.bsky.social/post/3mms7m5dgey2r", "content": "PgBouncer 1.25.2 fixes four CVEs. Two of them (CVE-2026-6664 and CVE-2026-6665) are reachable pre-auth and crash the pooler from a single SCRAM packet.\n\nIf your pooler is behind an unfiltered LB, patch this week.\n\nwww.pgbouncer.org/2026/05/pgbo...\n\npgexperts.com", "creation_timestamp": "2026-05-27T00:07:11.805977Z"}, {"uuid": "74ca21d4-e58a-4bd3-8ea8-37acfbbbffb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-66659", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117081363390555264", "content": "CVE-2026-66659: CRITICAL SQL Injection (CVSS 9.3) in Essekia Tablesome Table \u22641.2.9. Allows unauth\u2019d blind SQLi & data disclosure. No patch yet \u2014 monitor vendor updates. https://radar.offseq.com/threat/cve-2026-66659-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-04cbf964b30f2d13 #OffSeq #SQLInjection #Vuln #Infosec", "creation_timestamp": "2026-08-12T07:30:27.917025Z"}, {"uuid": "2d596d6c-6779-4e65-bb3d-dff7df0fd738", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-66659", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msumbw5snz2s", "content": "Critical SQL Injection (CVE-2026-66659) found in Essekia Tablesome Table \u22641.2.9 (CVSS 9.3). Exploitable remotely \u2014 no patch yet. Monitor vendor for updates. https://radar.offseq.com/threat/cve-2026-66659-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-04cbf...", "creation_timestamp": "2026-08-12T07:30:29.611517Z"}, {"uuid": "230df705-8d42-495f-87bb-23211aef37c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66659", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msusfuswls2n", "content": "CVE-2026-66659 - tablesome table\nA security weakness in the Tablesome Table plugin for WordPress makes it possible for attackers to access and manipulate your database. This could allow them to view\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#tablesometable #essekia #CVE #infosec", "creation_timestamp": "2026-08-12T09:20:04.534724Z"}, {"uuid": "a7452b11-7522-4303-8d76-1b2cb9f2f2c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66659", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msv3f3wirh2w", "content": "\ud83d\udd34 CVE-2026-66659 - Critical (9.3)\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerabilit...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-66659/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-12T12:00:42.578750Z"}, {"uuid": "0fae0dac-ec9b-425f-ab39-78c26426514e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66657", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hhozwpscnpulv", "content": "CVE-2026-66657 - WordPress Biagiotti Core plugin\nCVE ID : CVE-2026-66657\n \n Published : Aug. 13, 2026, 1:37 p.m. | 35\u00a0minutes ago\n \n Description : Unauthenticated Local File Inclusion in Biagiotti Core <= 2.1.1 versions.\n \n Severity: 8.1 | HIGH\n \n Visit the link for more de...", "creation_timestamp": "2026-08-13T14:24:42.543312Z"}, {"uuid": "ed379a76-15cf-42d7-86eb-14e531edf2fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66656", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ekxkpagqg4pgw", "content": "CVE-2026-66656 - WordPress Foton Core plugin\nCVE ID : CVE-2026-66656\n \n Published : Aug. 13, 2026, 1:37 p.m. | 35\u00a0minutes ago\n \n Description : Unauthenticated Local File Inclusion in Foton Core <= 1.1.1 versions.\n \n Severity: 8.1 | HIGH\n \n Visit the link for more details, s...", "creation_timestamp": "2026-08-13T14:30:42.631248Z"}, {"uuid": "7269e0e9-ecf0-4019-bf9d-413115668bed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66658", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hp5cm45z2pzj6", "content": "CVE-2026-66658 - WordPress Reviewer plugin\nCVE ID : CVE-2026-66658\n \n Published : Aug. 13, 2026, 1:37 p.m. | 35\u00a0minutes ago\n \n Description : Subscriber SQL Injection in Reviewer <= 3.14.2 versions.\n \n Severity: 8.5 | HIGH\n \n Visit the link for more details, such as CVSS det...", "creation_timestamp": "2026-08-13T14:36:42.442929Z"}, {"uuid": "b128830a-8478-4060-acd1-8a916e34ea36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66650", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mttecfeanv2e", "content": "CVE-2026-66650 - freightco\nThe FreightCo theme for WordPress, versions up to 1.1.15, can be accessed by anyone on the internet to inject malicious data that causes the server to execute unwanted commands.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#freightco #themerex #CVE #infosec", "creation_timestamp": "2026-08-24T13:00:07.343191Z"}, {"uuid": "6ebe5530-e318-497e-bd67-930dfaa81714", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66650", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtti3qsszv24", "content": "\ud83d\udea8 CVE-2026-66650 \u2014 CVSS 9.8 CRITICAL\n\nUnauthenticated PHP Object Injection in FreightCo <= 1.1.15 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-66650\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-24T14:07:59.994088Z"}, {"uuid": "cc878127-7ec9-47dc-a07d-9d3e574bdf3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66650", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/j74wude7nx7px", "content": "CVE-2026-66650 - WordPress FreightCo theme\nCVE ID : CVE-2026-66650\n \n Published : Aug. 24, 2026, 11:54 a.m. | 6\u00a0minutes ago\n \n Description : Unauthenticated PHP Object Injection in FreightCo <= 1.1.15 versions.\n \n Severity: 9.8 | CRITICAL\n \n Visit the link for more details,...", "creation_timestamp": "2026-08-24T12:26:46.724274Z"}, {"uuid": "e45d2a7d-c225-46c6-987d-e875eb29f651", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66652", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3eyez4ys3drdk", "content": "CVE-2026-66652 - WordPress Grand Tour theme\nCVE ID : CVE-2026-66652\n \n Published : Sept. 2, 2026, 11:50 a.m. | 20\u00a0minutes ago\n \n Description : Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Tour allows Cross Site Request Forgery.\n\nThis issue affects Grand ...", "creation_timestamp": "2026-09-02T13:35:25.455495Z"}, {"uuid": "dea1e4cd-a742-491f-b757-ff7cbdb79fcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66652", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3mumehrav6z27", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2026-66652\n\nCross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Tour allows Cross Site Request Forgery.\n\nThis issue affects Grand Tour: from n/...", "creation_timestamp": "2026-09-03T11:39:40.845989Z"}]}