CVE-2007-3488

creationtimestamp| type| source ---|---|--- 2026-06-20 00:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mooksdek3f2n...

PT-2026-51140

Name of the Vulnerable Software and Affected Versions WordPress Time Capsule Plugin version 1.21.16 Description An authentication bypass allows unauthenticated attackers to gain administrative access by sending a crafted POST request containing the IWP JSON PREFIX header. This flaw enables the...

CVE-2008-2474

creationtimestamp| type| source ---|---|--- 2026-06-19 23:37:05+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mooj4nccpj24...

CVE-2026-42895

creationtimestamp| type| source ---|---|--- 2026-06-19 22:41:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moofzqxwop2e 2026-06-26 22:05:15+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mp7xauccim2o...

CVE-2026-48089

creationtimestamp| type| source ---|---|--- 2026-06-19 22:04:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moodxmm5ga2a...

Cross-site Scripting (XSS)

Overview appium-mcp is an Intelligent MCP server providing AI assistants with powerful tools and resources for Appium mobile automation Affected versions of this package are vulnerable to Cross-site Scripting XSS via the createLocatorGeneratorUI function. An attacker can execute arbitrary...

Improper Verification of Source of a Communication Channel

Overview Affected versions of this package are vulnerable to Improper Verification of Source of a Communication Channel via improper validation of cross-origin messages in the window message listeners. An attacker can hijack authenticated editing sessions by sending crafted postMessage events fro...

GHSA-G5QX-H5F3-MP2F TinaCMS: Cross-origin postMessage handlers and rich-text URL-sanitization bypass enable stored XSS and session takeover

TinaCMS registers window message listeners — the useTina overlay handler, the OAuth authentication popup handler, and the admin↔preview iframe GraphQL reducer — that act on event.data without verifying event.origin or event.source, and post messages using non-specific target origins. A page the...

TinaCMS: Cross-origin postMessage handlers and rich-text URL-sanitization bypass enable stored XSS and session takeover

TinaCMS registers window message listeners — the useTina overlay handler, the OAuth authentication popup handler, and the admin↔preview iframe GraphQL reducer — that act on event.data without verifying event.origin or event.source, and post messages using non-specific target origins. A page the...

CVE-2008-6557

creationtimestamp| type| source ---|---|--- 2026-06-19 20:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3moo72rsqmo2a...

CVE-2019-25755

creationtimestamp| type| source ---|---|--- 2026-06-19 19:59:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moo4xgslle2g...

CVE-2019-25754

creationtimestamp| type| source ---|---|--- 2026-06-19 19:49:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moo4fipdtx2i...

CVE-2019-25758

creationtimestamp| type| source ---|---|--- 2026-06-19 19:34:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moo3kndhcs2x...

CVE-2009-3473

creationtimestamp| type| source ---|---|--- 2026-06-19 18:37:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3monyeb5jl52i...

CVE-2017-20277

creationtimestamp| type| source ---|---|--- 2026-06-19 18:20:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monxfyu6sh2m...

CVE-2017-20276

creationtimestamp| type| source ---|---|--- 2026-06-19 18:07:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monwoylnca2g...

CVE-2026-56211

creationtimestamp| type| source ---|---|--- 2026-06-19 17:49:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monvpu3zau2k...

CVE-2019-25757

Joomla vWishlist 1.0.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the vproductid and userid parameters. Attackers can send POST requests to the component with crafted SQL payloads in these...

CVE-2019-25751 Joomla J-ClassifiedsManager 3.0.5 SQL Injection

Joomla Component J-ClassifiedsManager 3.0.5 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through POST parameters. Attackers can submit crafted SQL payloads in the categorySearch, adType, and citySearch...

CVE-2019-25751 Joomla J-ClassifiedsManager 3.0.5 SQL Injection

Joomla Component J-ClassifiedsManager 3.0.5 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through POST parameters. Attackers can submit crafted SQL payloads in the categorySearch, adType, and citySearch...