App Manager security vulnerability

App Manager is an Android package manager and viewer developed by Muntashir Al-Islam as a personal project. Versions of App Manager prior to 4.0.4 contained security vulnerabilities, which were caused by integer overflows or circular errors in the TarUtils.Java files...

CVE-2026-1190

creationtimestamp| type| source ---|---|--- 2026-01-26 21:40:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mde7i3kllt26...

CVE-2026-24429

creationtimestamp| type| source ---|---|--- 2026-01-26 20:21:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mde32sdd2s2n...

Get paid to scroll TikTok? The data trade behind Freecash ads

Loyal readers and other privacy-conscious people will be familiar with the expression, “If it’s too good to be true, it’s probably false.” Getting paid handsomely to scroll social media definitely falls into that category. It sounds like an easy side hustle, which usually means there’s a catch. I...

CVE-2025-59108

creationtimestamp| type| source ---|---|--- 2026-01-26 11:54:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdd6qm6z2n2i...

CVE-2025-59090

creationtimestamp| type| source ---|---|--- 2026-01-26 11:51:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdd6la6tda2c...

EUVD-2025-206356

A local privilege escalation vulnerability has been identified in the Kaba exos 9300 System management application d9sysdef.exe. Within this application it is possible to specify an arbitrary executable as well as the weekday and start time, when the specified executable should be run with SYSTEM...

CVE-2026-1300

creationtimestamp| type| source ---|---|--- 2026-01-24 13:37:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md6dja5pwn2m...

CVE-2026-1098

creationtimestamp| type| source ---|---|--- 2026-01-24 11:03:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md62wkuoyf2g...

CVE-2026-0633

creationtimestamp| type| source ---|---|--- 2026-01-24 10:37:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md5zhdwty72c...

CVE-2026-24656

creationtimestamp| type| source ---|---|--- 2026-01-24 05:37:05+00:00| seen| https://seclists.org/oss-sec/2026/q1/112 2026-01-24 06:55:53+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3md5n3wfzjz2u 2026-01-26 05:51:15+00:00| seen|...

CVE-2025-70458

A DOM-based Cross-Site Scripting XSS vulnerability exists in the DomainCheckerApp class within domain/script.js of Sourcecodester Domain Availability Checker v1.0. The vulnerability occurs because the application improperly handles user-supplied data in the createResultElement method by using the...

CVE-2025-70457

A Remote Code Execution RCE vulnerability exists in Sourcecodester Modern Image Gallery App v1.0 within the gallery/upload.php component. The application fails to properly validate uploaded file contents. Additionally, the application preserves the user-supplied file extension during the save...

CVE-2025-70457

A Remote Code Execution RCE vulnerability exists in Sourcecodester Modern Image Gallery App v1.0 within the gallery/upload.php component. The application fails to properly validate uploaded file contents. Additionally, the application preserves the user-supplied file extension during the save...

CVE-2025-70458

A DOM-based Cross-Site Scripting XSS vulnerability exists in the DomainCheckerApp class within domain/script.js of Sourcecodester Domain Availability Checker v1.0. The vulnerability occurs because the application improperly handles user-supplied data in the createResultElement method by using the...

CVE-2026-22463

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Micro.company Form to Chat App form-to-chat allows Stored XSS.This issue affects Form to Chat App: from n/a through = 1.2.5...

CVE-2021-47906

creationtimestamp| type| source ---|---|--- 2026-01-23 20:00:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md4iid2tms2t...

CVE-2021-47903

LiteSpeed Web Server Enterprise 5.4.11 contains an authenticated command injection vulnerability in the external app configuration interface. Authenticated administrators can inject shell commands through the 'Command' parameter in the server configuration, allowing remote code execution via path...

CVE-2026-22987

creationtimestamp| type| source ---|---|--- 2026-01-23 17:04:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md46mgm2ym2i...

CVE-2021-47903 LiteSpeed Web Server Enterprise 5.4.11 - Command Injection

LiteSpeed Web Server Enterprise 5.4.11 contains an authenticated command injection vulnerability in the external app configuration interface. Authenticated administrators can inject shell commands through the 'Command' parameter in the server configuration, allowing remote code execution via path...