CVE-2026-25759: Improper Neutralization of Input During Web Page Generation

Statmatic is a Laravel and Git powered content management system CMS. From 6.0.0 to before 6.2.3, a stored XSS vulnerability in content titles allows authenticated users with content creation permissions to inject malicious JavaScript that executes when viewed by higher-privileged users. Maliciou...

Microcom ZeusWeb 安全漏洞

Microcom ZeusWeb is a remote monitoring platform developed by the Spanish company Microcom. Version 6.1.31 of Microcom ZeusWeb contains a security vulnerability. This vulnerability stems from the injection of XSS payloads into the Surname parameter during the Create Account operation, which may...

📄 Qualys Security Advisory - Exim 21Nails Advisory

Qualys audited central parts of the Exim mail server and discovered 21 vulnerabilities, with 11 being local vulnerabilities and 10 being remote vulnerabilities. This is older research from 2021 that was missing from the archive. Qualys Security Advisory 21Nails: Multiple vulnerabilities in Exim...

PT-2026-7633

Name of the Vulnerable Software and Affected Versions PostgreSQL Anonymizer versions prior to 3.0.1 Description The software contains a flaw that could allow a user to obtain superuser privileges. This is achieved by creating a custom operator within the public schema and embedding malicious code...

CVE-2019-25313: Cross-Site Request Forgery (CSRF)

FlexNet Publisher 11.12.1 contains a cross-site request forgery vulnerability that allows attackers to create administrative user accounts without authentication. Attackers can craft a malicious HTML form to trick authenticated users into submitting a request that creates a new local admin accoun...

GHSA-Q455-M56C-85MH

creationtimestamp| type| source ---|---|--- 2026-02-10 19:10:06+00:00| seen| https://gist.github.com/alon710/c533b0ed39b2dd99fa8ad47f72c7f847...

CVE-2026-26009 Catalyst Affected by Remote Code Execution as Root via Containerized Install Script Execution

Catalyst is a platform built for enterprise game server hosts, game communities, and billing panel integrations. Install scripts defined in server templates execute directly on the host operating system as root via bash -c, with no sandboxing or containerization. Any user with template.create or...

CVE-2026-26009

Catalyst is a platform built for enterprise game server hosts, game communities, and billing panel integrations. Install scripts defined in server templates execute directly on the host operating system as root via bash -c, with no sandboxing or containerization. Any user with template.create or...

GHSA-X6CR-MQ53-CC76

creationtimestamp| type| source ---|---|--- 2026-02-10 18:10:05+00:00| seen| https://gist.github.com/alon710/e8aa15df4f8e3ea4e441cfecadaefb08...

CVE-2025-22453

creationtimestamp| type| source ---|---|--- 2026-02-10 17:59:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mejk4uq73l2v...

GHSA-VX5F-VMR6-32WF

creationtimestamp| type| source ---|---|--- 2026-02-10 17:40:06+00:00| seen| https://gist.github.com/alon710/82ecad7d4a28a6bf47ea75b198e40cd1...

CVE-2026-25506

creationtimestamp| type| source ---|---|--- 2026-02-10 17:34:57+00:00| seen| https://seclists.org/oss-sec/2026/q1/160 2026-02-10 19:17:07+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mejogz7tx32a 2026-02-11 07:27:23+00:00| seen|...

CVE-2026-21248

creationtimestamp| type| source ---|---|--- 2026-02-10 17:30:28+00:00| seen| https://www.thezdi.com/blog/2026/2/10/the-february-2026-security-update-review 2026-02-10 18:01:45+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0053 2026-02-10 18:30:45+00:00| seen|...

CVE-2026-21236

creationtimestamp| type| source ---|---|--- 2026-02-10 17:30:28+00:00| seen| https://www.thezdi.com/blog/2026/2/10/the-february-2026-security-update-review 2026-02-10 18:01:45+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0053 2026-02-10 18:17:15+00:00| seen|...

CVE-2026-21511

creationtimestamp| type| source ---|---|--- 2026-02-10 17:30:28+00:00| seen| https://www.thezdi.com/blog/2026/2/10/the-february-2026-security-update-review 2026-02-10 18:11:42+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0058 2026-02-11 10:00:44+00:00| seen|...

CVE-2026-20841

creationtimestamp| type| source ---|---|--- 2026-02-10 17:30:28+00:00| seen| https://www.thezdi.com/blog/2026/2/10/the-february-2026-security-update-review 2026-02-10 21:22:36+00:00| seen| https://bsky.app/profile/timb-machine.infosec.exchange.ap.brid.gy/post/3mejvh7k4x3p2 2026-02-10...

CVE-2025-30513

creationtimestamp| type| source ---|---|--- 2026-02-10 17:25:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meji7xfydo2o 2026-02-11 13:17:13+00:00| published-proof-of-concept| https://t.me/truesecator/7898...

USN-7942-2 glib2.0 vulnerabilities

USN-7942-1 fixed vulnerabilities in GLib. This update provides the corresponding updates for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. CVE-2025-3360 only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that GLib...

CVE-2026-24676

creationtimestamp| type| source ---|---|--- 2026-02-10 16:25:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mejeu7667u27...

CVE-2025-13333

creationtimestamp| type| source ---|---|--- 2026-02-10 16:05:05+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3mejdpmkx7z2x 2026-02-11 14:35:06+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3melp5mtvu527...