123031 matches found
CVE-2026-55833
creationtimestamp| type| source ---|---|--- 2026-07-21 02:18:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4qlzdkjo2o 2026-07-22 16:00:04+00:00| seen| https://t.me/bdufstecru/3334 2026-07-22 22:35:22+00:00| published-proof-of-concept|...
CVE-2026-48349
creationtimestamp| type| source ---|---|--- 2026-07-21 00:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mr4kwieey42l...
CVE-2026-59727
creationtimestamp| type| source ---|---|--- 2026-07-21 00:35:05+00:00| published-proof-of-concept| https://github.com/withastro/astro/security/advisories/GHSA-7pw4-f3q4-r2p2...
GHSA-H95V-H523-3MW8
creationtimestamp| type| source ---|---|--- 2026-07-21 00:31:29+00:00| seen| https://gist.github.com/alon710/07f073f92ce20c0890f37523b73f7af8...
EUVD-2026-46141
An issue in safishamsi Open-Source GRAPHIFY v.0.3.2 through v0.4.29 allows a remote attacker to execute arbitrary code via the validateurl, safefetch, buildopener, fetchhtml and downloadbinary functions...
AuthProbe: Specification-Driven, Multi-Identity Detection of Broken Object-Level Authorization in Recruitment API
Broken Object-Level Authorization BOLA, also known as Insecure Direct Object Reference IDOR, has topped the OWASP API Security ranking since 2019 and is the root cause of some of the largest exposures of applicant data in recruitment technology. The defining feature of this flaw class is that a...
PT-2026-61997
Name of the Vulnerable Software and Affected Versions ansible-core affected versions not specified Description An issue exists in the extract collection from git function within concrete artifact manager.py where git clone commands are constructed without an end-of-options separator before...
ROS-20260721-73-0034
The vulnerability of the Media components in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of these components. Exploiting this vulnerability could allow an attacker to bypass security restrictions remotely...
ROS-20260721-73-0041
The vulnerability of the Autofill function in Google Chrome and Microsoft Edge browsers is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow attackers to disclose sensitive information remotely...
PT-2026-62079
Name of the Vulnerable Software and Affected Versions FOG versions prior to 1.5.10.1832 FOG versions prior to 1.6.0-beta.2313 Description The unauthenticated inventory service endpoint /service/inventory.php persists client-supplied values without sanitization. Additionally, the Host Management...
PT-2026-61986
Name of the Vulnerable Software and Affected Versions BuildKit affected versions not specified Description Custom frontends or clients utilizing the raw low-level API may set the git.checkoutbundle variable to true during the checkout of Git sources. A malicious Git source can exploit this...
XSSer Penetration Testing Tool 1.9
XSSer is an open source penetration testing tool that automates the process of detecting and exploiting XSS injections against different applications. It contains several options to try to bypass certain filters, and various special techniques of code injection. 12 additions, 12 modifications, 10...
CVE-2026-57495
creationtimestamp| type| source ---|---|--- 2026-07-20 23:50:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4icrfnis2e...
CVE-2026-57355
creationtimestamp| type| source ---|---|--- 2026-07-20 23:44:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mr4hxrfgkg2n 2026-07-21 09:44:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mr5jinmkg227 2026-07-21 19:44:08+00:00| seen|...
@astrojs/rss: XML Injection via Unescaped RSS Feed Fields
Summary In @astrojs/rss, the source.title and enclosure.type item fields are interpolated directly into XML template strings without XML-character escaping before being parsed by fast-xml-parser. An attacker who controls these field values can inject arbitrary XML elements into the generated RSS...
GHSA-8J5Q-MFJ2-5Q9Q @astrojs/rss: XML Injection via Unescaped RSS Feed Fields
Summary In @astrojs/rss, the source.title and enclosure.type item fields are interpolated directly into XML template strings without XML-character escaping before being parsed by fast-xml-parser. An attacker who controls these field values can inject arbitrary XML elements into the generated RSS...
XML Injection
Overview @astrojs/rss is an Add RSS feeds to your Astro projects Affected versions of this package are vulnerable to XML Injection via the source.title and enclosure.type fields, which are interpolated directly into XML templates without proper escaping. An attacker can inject arbitrary XML...
CVE-2026-47255
creationtimestamp| type| source ---|---|--- 2026-07-20 23:01:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr4flmkaao2l 2026-07-20 23:55:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4ilpwk632s...