31563 matches found
EUVD-2026-0904
A vulnerability was found in SourceCodester API Key Manager App 1.0. Affected by this vulnerability is an unknown functionality of the component Import Key Handler. Performing a manipulation results in cross site scripting. The attack can be initiated remotely...
CVE-2025-15457
creationtimestamp| type| source ---|---|--- 2026-01-05 06:00:38+00:00| published-proof-of-concept| Telegram/PEDMC-xQRSNOdcRnaiEMJorZFRbVJMF3imIAdH1nAh3lQ 2026-01-05 08:38:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbnzy7hppu2x...
CVE-2025-15455
creationtimestamp| type| source ---|---|--- 2026-01-05 04:32:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbnmac6esn2c 2026-01-05 05:01:22+00:00| published-proof-of-concept| Telegram/tnSVeYZoZ7XDXZtoAg8da9hyH6297qKNo6VluCdDLGMBhU...
CVE-2025-15450
creationtimestamp| type| source ---|---|--- 2026-01-05 03:00:12+00:00| published-proof-of-concept| Telegram/HaYN5VGeDlHBDPVGu-E05573P0whzmUBrl9HLUERZWszU4 2026-01-05 05:00:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbnnsid3wf2q...
WordPress Form to Chat App plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Nabil Irawan in WordPress Plugin Form to Chat App versions = 1.2.5...
CVE-2026-0571
A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this issue is the function createResponseEntity of the file warehouse\src\main\java\com\yeqifu\sys\common\AppFileUtils.java. The manipulation of the argument path results in path...
CVE-2026-0571
A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this issue is the function createResponseEntity of the file warehouse\src\main\java\com\yeqifu\sys\common\AppFileUtils.java. The manipulation of the argument path results in path...
CVE-2025-62840 HBS 3 Hybrid Backup Sync
A generation of error message containing sensitive information vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attacker gains local network access, they can then exploit the vulnerability to read application data. We have already fixed the vulnerability in the following...
CVE-2025-15424
creationtimestamp| type| source ---|---|--- 2026-01-02 04:33:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbg2vkqh3y2r 2026-01-02 18:53:53+00:00| published-proof-of-concept| Telegram/06q-TvAKXAyL-ZabO-7p63z6qQH9ntO7cFX9ghbvmNNE5E 2026-01-02 21:55:41+00:00|...
CVE-2025-11961
creationtimestamp| type| source ---|---|--- 2026-01-02 00:01:41+00:00| seen| https://bsky.app/profile/slackers.it/post/3mbfloxy2422a 2026-01-09 13:55:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mbynjr2oyn22 2026-01-10 20:53:09+00:00| seen|...
PT-2026-1126
Name of the Vulnerable Software and Affected Versions yeqifu warehouse affected versions not specified Description A security flaw exists in yeqifu warehouse due to path traversal. The issue is related to the manipulation of the path argument within the createResponseEntity function located in th...
CVE-2025-13029
The Knowband Mobile App Builder WordPress plugin before 3.0.0 does not have authorisation when deleting users via its REST API, allowing unauthenticated attackers to delete arbitrary users...
CVE-2025-22189
creationtimestamp| type| source ---|---|--- 2026-01-01 04:37:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbdkmhyy2q2x...
CVE-2025-67709
creationtimestamp| type| source ---|---|--- 2026-01-01 01:06:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbd6tyvcak2c 2026-01-02 02:25:33+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3mbftqanq7x2d 2026-01-02 08:00:19+00:00| seen|...
CVE-2025-69412
creationtimestamp| type| source ---|---|--- 2026-01-01 00:32:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbd4wvviop2g...
EUVD-2025-206056
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nebelhorn Blappsta Mobile App Plugin & Your native, mobile iPhone App and Android App allows Reflected XSS.This issue affects Blappsta Mobile App Plugin Your native, mobile iPhone App and Android...
CVE-2025-50053 WordPress Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App Plugin <= 0.8.8.8 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nebelhorn Blappsta Mobile App Plugin & Your native, mobile iPhone App and Android App allows Reflected XSS.This issue affects Blappsta Mobile App Plugin Your native, mobile iPhone App and Android...
CVE-2025-50053
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nebelhorn Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App yournewsapp allows Reflected XSS.This issue affects Blappsta Mobile App Plugin – Your native, mobile iPhone App...
