49455 matches found
Malicious code in streak-metricsaz (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91054f07d768c0a8605fb644d2cc4003bb6a5d5b9502be2911d9090bc5a37d45 [email protected] presents itself as a calendar/streak math helper but its main entry runs a top-level IIFE that copies a bundled binary...
MAL-2026-11527 Malicious code in streak-metricsaz (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91054f07d768c0a8605fb644d2cc4003bb6a5d5b9502be2911d9090bc5a37d45 [email protected] presents itself as a calendar/streak math helper but its main entry runs a top-level IIFE that copies a bundled binary...
CVE-2025-29296
creationtimestamp| type| source ---|---|--- 2026-08-04 21:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbwhogkt22l...
Cross-site Scripting (XSS)
Overview ghost is a publishing platform Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Universal Import process. An attacker can inject malicious scripts into post content by importing specially crafted data. Details Cross-site scripting or XSS is a code...
CVE-2026-70588
Ghost is a Node.js content management system. From 5.26.0 until 6.54.1, the Universal Import feature in Ghost Admin failed to properly sanitize imported content resulting in XSS in post content. This issue is fixed in version 6.54.1...
CVE-2026-70588 Ghost: Cross-Site Scripting in Universal Import
Ghost is a Node.js content management system. From 5.26.0 until 6.54.1, the Universal Import feature in Ghost Admin failed to properly sanitize imported content resulting in XSS in post content. This issue is fixed in version 6.54.1...
EUVD-2026-52928
Ghost is a Node.js content management system. From 5.26.0 until 6.54.1, the Universal Import feature in Ghost Admin failed to properly sanitize imported content resulting in XSS in post content. This issue is fixed in version 6.54.1...
CVE-2026-70588 Ghost: Cross-Site Scripting in Universal Import
Ghost is a Node.js content management system. From 5.26.0 until 6.54.1, the Universal Import feature in Ghost Admin failed to properly sanitize imported content resulting in XSS in post content. This issue is fixed in version 6.54.1...
CVE-2026-70588
CVE-2026-70588 affects the Ghost CMS (Node.js). From 5.26.0 through 6.54.1, the Universal Import feature in Ghost Admin did not properly sanitize imported content, causing an XSS in post content. The issue has been fixed in version 6.54.1. Affected versions should upgrade to 6.54.1 or later to re...
CVE-2026-70486
creationtimestamp| type| source ---|---|--- 2026-08-04 21:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msbvth5jkk2n 2026-08-04 22:35:16+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-3xpf-xq7r-v8c5...
CVE-2026-67592
creationtimestamp| type| source ---|---|--- 2026-08-04 20:12:38+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/7p5nbufssz34w...
CVE-2026-67591
creationtimestamp| type| source ---|---|--- 2026-08-04 20:06:41+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/ayo27b4c6lfg2...
CVE-2026-67590
creationtimestamp| type| source ---|---|--- 2026-08-04 20:00:41+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3xxd5lc2zvh3f...
CVE-2026-67465
creationtimestamp| type| source ---|---|--- 2026-08-04 19:42:41+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/2knjhf4ygmvex...
WordPress WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars plugin <= 3.9.1 - Authenticated (Author+) SQL Injection vulnerability
Authenticated Author+ SQL Injection vulnerability discovered by Ryoma Nishioka in WordPress Plugin WP Post Author versions = 3.9.1...
CVE-2026-49435
creationtimestamp| type| source ---|---|--- 2026-08-04 19:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbq3sut7l22 2026-08-04 20:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msbsho4k232t...
CVE-2017-20242
creationtimestamp| type| source ---|---|--- 2026-08-04 19:16:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbpybpcej2z...
CVE-2017-20241
creationtimestamp| type| source ---|---|--- 2026-08-04 19:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbpyagwyh2l...