24510 matches found
Summarize's hover summary feature allows malicious pages to dispatch synthetic mouseover events over attacker-controlled links
Summarize prior to 0.15.0 contains a vulnerability in the hover summary feature that allows malicious pages to dispatch synthetic mouseover events over attacker-controlled links, causing the extension to make authenticated daemon requests using stored tokens without verifying event trustworthines...
CVE-2026-43968
A flaw was found in cowlib. An Improper Neutralization of CRLF Sequences Carriage Return Line Feed Injection vulnerability allows a remote attacker to inject bare carriage return characters into Server-Sent Events SSE fields. This enables event splitting and injection of arbitrary event types and...
CVE-2026-5163
creationtimestamp| type| source ---|---|--- 2026-05-18 14:44:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm54ha7ldl2i...
GHSA-79CF-XCQC-C78W
creationtimestamp| type| source ---|---|--- 2026-05-18 14:40:50+00:00| seen| https://gist.github.com/alon710/6c307c7259353f2c5a97793055cbda6e...
CVE-2026-42659
creationtimestamp| type| source ---|---|--- 2026-05-18 11:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mm4rqkm3rc2h...
CVE-2026-3495
creationtimestamp| type| source ---|---|--- 2026-05-18 09:04:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4jg7ejsq2p...
CVE-2026-8721
creationtimestamp| type| source ---|---|--- 2026-05-17 20:22:45+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mm36uqfydx2b 2026-05-17 22:32:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm3g4qzayl2p 2026-05-30 11:00:53+00:00| seen|...
CVE-2026-46519
creationtimestamp| type| source ---|---|--- 2026-05-17 19:26:09+00:00| published-proof-of-concept| https://github.com/Flux159/mcp-server-kubernetes/security/advisories/GHSA-cr22-wjx7-2w6m 2026-05-18 13:56:39+00:00| seen| https://bsky.app/profile/axsharma.com/post/3mm4zho6fpc2i 2026-06-15...
CVE-2018-25329
creationtimestamp| type| source ---|---|--- 2026-05-17 14:45:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm2m222nlt2h...
CVE-2018-25319
Redaxo CMS Addon MyEvents 2.2.1 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the myeventsid parameter. Attackers can send GET requests to the eventadd.php page with malicious myeventsid values to extract o...
CVE-2018-25319 Redaxo CMS Addon MyEvents 2.2.1 SQL Injection via event_add.php
Redaxo CMS Addon MyEvents 2.2.1 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the myeventsid parameter. Attackers can send GET requests to the eventadd.php page with malicious myeventsid values to extract o...
CVE-2018-25319
Vulnerability summary: Redaxo CMS Addon MyEvents 2.2.1 contains an SQL injection in the event_add.php flow via the myevents_id parameter. The issue can be exploited by authenticated users sending crafted GET requests to the event_add.php endpoint to influence database queries and potentially extr...
EUVD-2018-21840
Redaxo CMS Addon MyEvents 2.2.1 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the myeventsid parameter. Attackers can send GET requests to the eventadd.php page with malicious myeventsid values to extract o...
CVE-2026-43907
creationtimestamp| type| source ---|---|--- 2026-05-17 09:02:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlzyqsnspt2l 2026-05-20 14:47:50+00:00| seen| https://t.me/bdufstecru/3179...
CVE-2026-8736
creationtimestamp| type| source ---|---|--- 2026-05-17 08:50:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlzy7i73pu2o...
CVE-2018-25334
creationtimestamp| type| source ---|---|--- 2026-05-17 04:16:45+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2018-25334 2026-05-17 15:17:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm2nt77cup2r...
CVE-2018-25336
creationtimestamp| type| source ---|---|--- 2026-05-17 04:16:45+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2018-25336 2026-05-17 15:03:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm2mzmqv3j2e...
PT-2026-41545
Redaxo CMS Addon MyEvents 2.2.1 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the myevents id parameter. Attackers can send GET requests to the event add.php page with malicious myevents id values to extrac...
