CVE-2026-1810: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was detected in bolo-blog bolo-solo up to 2.6.4. The impacted element is the function unpackFilteredZip of the file src/main/java/org/b3log/solo/bolo/prop/BackupService.java of the component ZIP File Handler. Performing a manipulation of the argument File results in path traversal...

Jeffrey Epstein Had a ‘Personal Hacker,’ Informant Claims

Plus: AI agent OpenClaw gives cybersecurity experts the willies, China executes 11 scam compound bosses, a $40 million crypto theft has an unexpected alleged culprit, and more...

CVE-2020-37019

Orchard Core RC1 contains a persistent cross-site scripting vulnerability that allows remote attackers to inject malicious scripts through blog post creation. Attackers can create blog posts with embedded JavaScript in the MarkdownBodyPart.Source parameter to execute arbitrary scripts in victim...

Cross-site Scripting (XSS)

Overview OrchardCore is an application framework for building modular, multi-tenant applications on ASP.NET Core. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the MarkdownBodyPart.Source parameter during blog post creation. An attacker can execute arbitrary...

CVE-2020-37019

Orchard Core RC1 contains a persistent cross-site scripting vulnerability that allows remote attackers to inject malicious scripts through blog post creation. Attackers can create blog posts with embedded JavaScript in the MarkdownBodyPart.Source parameter to execute arbitrary scripts in victim...

CVE-2020-37019

Orchard Core RC1 contains a persistent cross-site scripting (XSS) vulnerability that lets an attacker inject malicious JavaScript via blog posts. The flaw is triggered when embedded JavaScript is placed in the MarkdownBodyPart.Source parameter during blog-post creation, allowing code execution in...

CVE-2020-37019 Orchard Core RC1 - Persistent Cross-Site Scripting

Orchard Core RC1 contains a persistent cross-site scripting vulnerability that allows remote attackers to inject malicious scripts through blog post creation. Attackers can create blog posts with embedded JavaScript in the MarkdownBodyPart.Source parameter to execute arbitrary scripts in victim...

EUVD-2020-30959

Orchard Core RC1 contains a persistent cross-site scripting vulnerability that allows remote attackers to inject malicious scripts through blog post creation. Attackers can create blog posts with embedded JavaScript in the MarkdownBodyPart.Source parameter to execute arbitrary scripts in victim...

CVE-2020-37019 Orchard Core RC1 - Persistent Cross-Site Scripting

Orchard Core RC1 contains a persistent cross-site scripting vulnerability that allows remote attackers to inject malicious scripts through blog post creation. Attackers can create blog posts with embedded JavaScript in the MarkdownBodyPart.Source parameter to execute arbitrary scripts in victim...

CVE-2020-37019: Improper Neutralization of Input During Web Page Generation

Orchard Core RC1 contains a persistent cross-site scripting vulnerability that allows remote attackers to inject malicious scripts through blog post creation. Attackers can create blog posts with embedded JavaScript in the MarkdownBodyPart.Source parameter to execute arbitrary scripts in victim...

PT-2026-5416

Orchard Core RC1 contains a persistent cross-site scripting vulnerability that allows remote attackers to inject malicious scripts through blog post creation. Attackers can create blog posts with embedded JavaScript in the MarkdownBodyPart.Source parameter to execute arbitrary scripts in victim...

Orchard Core cross-site scripting vulnerabilities

Orchard Core is an open-source modularized and multi-tenant application framework built using Asp.Net Core by the US-based Orchard Core company. It also includes a content management system Cms built on top of this framework. The Orchard Core RC1 version contained a cross-site scripting...

Tale Blog Security Vulnerabilities

Tale Blog is a Java blog developed using the Tale Blog System, which is open-source. Version 2.0.5 of Tale Blog has a security vulnerability that can be exploited by cross-site scripting attacks...

@vitnode/blog (>=1.2.0-canary.56, <=1.2.0-canary.59) potentially affected by unknown CVE via next (15.6.0-canary.41)

next NPM version 15.6.0-canary.41 is affected by a known vulnerability. The following packages have a transitive dependency on next and may be impacted: - @vitnode/blog =1.2.0-canary.56, =1.2.0-canary.59 Source cves: unknown CVE Source advisory: OSV:GHSA-H25M-26QC-WCJF...

@vitnode/blog (>=1.2.0-canary.56, <=1.2.0-canary.59) potentially affected by CVE-2026-23864 via next (15.6.0-canary.41)

next NPM version 15.6.0-canary.41 is affected by a known vulnerability. The following packages have a transitive dependency on next and may be impacted: - @vitnode/blog =1.2.0-canary.56, =1.2.0-canary.59 Source cves: CVE-2026-23864 Source advisory: GHSA-H25M-26QC-WCJF...

@vitnode/blog (>=1.2.0-canary.56, <=1.2.0-canary.59) potentially affected by CVE-2025-59472 via next (15.6.0-canary.41)

next NPM version 15.6.0-canary.41 is affected by a known vulnerability. The following packages have a transitive dependency on next and may be impacted: - @vitnode/blog =1.2.0-canary.56, =1.2.0-canary.59 Source cves: CVE-2025-59472 Source advisory: OSV:GHSA-5F7Q-JPQC-WP7H...

@vitnode/blog (>=1.2.0-canary.56, <=1.2.0-canary.59) potentially affected by CVE-2025-59472 via next (15.6.0-canary.41)

next NPM version 15.6.0-canary.41 is affected by a known vulnerability. The following packages have a transitive dependency on next and may be impacted: - @vitnode/blog =1.2.0-canary.56, =1.2.0-canary.59 Source cves: CVE-2025-59472 Source advisory: GHSA-5F7Q-JPQC-WP7H...

Best IT Managed Services for Large Enterprises

Learn what defines top-tier enterprise managed IT services, why they matter, and how Mindcore Technologies meets large-scale business demands...

Enhancements to Akamai API Security, Q4 2025

The Q4 2025 Akamai API Security updates help organizations shift security left, improve coverage, and reduce friction...

@vitnode/blog (>=1.2.0-canary.56, <=1.2.0-canary.59) potentially affected by CVE-2025-59471 +1 more via next (15.6.0-canary.41)

next NPM version 15.6.0-canary.41 is affected by a known vulnerability. The following packages have a transitive dependency on next and may be impacted: - @vitnode/blog =1.2.0-canary.56, =1.2.0-canary.59 Source cves: CVE-2025-59471, CVE-2025-59472 Source advisory: MEND:CVE-2025-59472...