39562 matches found
CVE-2026-56319
creationtimestamp| type| source ---|---|--- 2026-06-20 20:41:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqprqhqzl2r...
CVE-2026-56332
creationtimestamp| type| source ---|---|--- 2026-06-20 19:54:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqn5gwuvf2w...
CVE-2026-44914
creationtimestamp| type| source ---|---|--- 2026-06-20 17:40:22+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3moqfnp5qnq2s 2026-06-22 09:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3moujjvtdeq2m 2026-06-22 09:00:38+00:00| seen|...
CVE-2022-50972
creationtimestamp| type| source ---|---|--- 2026-06-20 16:04:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqac2ykyy2j 2026-07-17 23:35:04+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mquw2r6h3s2s...
CVE-2023-33190
creationtimestamp| type| source ---|---|--- 2026-06-20 09:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mopknjoa4c25...
CVE-2007-1766
creationtimestamp| type| source ---|---|--- 2026-06-20 03:37:05+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3moowjs4ax42g...
CVE-2026-9843
creationtimestamp| type| source ---|---|--- 2026-06-20 02:43:07+00:00| seen| https://bsky.app/profile/suriq.io/post/3mootjayro42t 2026-06-20 05:44:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mop5nox22k23 2026-06-20 09:00:30+00:00| seen|...
CVE-2026-56213
creationtimestamp| type| source ---|---|--- 2026-06-20 02:14:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moorvvnelh2e...
CVE-2026-53532
creationtimestamp| type| source ---|---|--- 2026-06-20 02:01:08+00:00| seen| https://bsky.app/profile/slackers.it/post/3moor6754ks2n...
CVE-2026-55371
creationtimestamp| type| source ---|---|--- 2026-06-20 02:01:07+00:00| seen| https://bsky.app/profile/slackers.it/post/3moor6754ks2n...
CVE-2007-3488
creationtimestamp| type| source ---|---|--- 2026-06-20 00:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mooksdek3f2n...
PT-2026-51140
Name of the Vulnerable Software and Affected Versions WordPress Time Capsule Plugin version 1.21.16 Description An authentication bypass allows unauthenticated attackers to gain administrative access by sending a crafted POST request containing the IWP JSON PREFIX header. This flaw enables the...
CVE-2008-2474
creationtimestamp| type| source ---|---|--- 2026-06-19 23:37:05+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mooj4nccpj24...
CVE-2026-42895
creationtimestamp| type| source ---|---|--- 2026-06-19 22:41:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moofzqxwop2e 2026-06-26 22:05:15+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mp7xauccim2o...
CVE-2026-48089
creationtimestamp| type| source ---|---|--- 2026-06-19 22:04:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moodxmm5ga2a...
Cross-site Scripting (XSS)
Overview appium-mcp is an Intelligent MCP server providing AI assistants with powerful tools and resources for Appium mobile automation Affected versions of this package are vulnerable to Cross-site Scripting XSS via the createLocatorGeneratorUI function. An attacker can execute arbitrary...
Improper Verification of Source of a Communication Channel
Overview Affected versions of this package are vulnerable to Improper Verification of Source of a Communication Channel via improper validation of cross-origin messages in the window message listeners. An attacker can hijack authenticated editing sessions by sending crafted postMessage events fro...
GHSA-G5QX-H5F3-MP2F TinaCMS: Cross-origin postMessage handlers and rich-text URL-sanitization bypass enable stored XSS and session takeover
TinaCMS registers window message listeners — the useTina overlay handler, the OAuth authentication popup handler, and the admin↔preview iframe GraphQL reducer — that act on event.data without verifying event.origin or event.source, and post messages using non-specific target origins. A page the...
TinaCMS: Cross-origin postMessage handlers and rich-text URL-sanitization bypass enable stored XSS and session takeover
TinaCMS registers window message listeners — the useTina overlay handler, the OAuth authentication popup handler, and the admin↔preview iframe GraphQL reducer — that act on event.data without verifying event.origin or event.source, and post messages using non-specific target origins. A page the...