39576 matches found
CVE-2026-11718
creationtimestamp| type| source ---|---|--- 2026-06-18 13:13:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokvs5esly2y 2026-06-18 14:00:17+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mokygbvzep2c 2026-06-18 14:00:30+00:00| seen|...
CVE-2026-20265
creationtimestamp| type| source ---|---|--- 2026-06-18 13:10:36+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mokvncudk626 2026-07-13 20:09:05+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mqkiorr2f22u...
CVE-2026-54219
UBB.threads is vulnerable to Stored XSS via user posts and user profile fields. The application fails to properly sanitize user input, allowing low privileged attackers to inject arbitrary JavaScript that executes in a victim's browser upon viewing. Because vendor contact attempts were...
EUVD-2026-37874
An SQL Injection vulnerability exists in LMS LAN Management System before commit 4cb30a7 within the "tarifflist.php" module due to insufficient sanitization of the POST "tg" parameter. The application directly concatenates user-supplied array values into an SQL query using "implode", allowing...
CVE-2026-55742
creationtimestamp| type| source ---|---|--- 2026-06-18 08:48:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokgyupp3y2v...
CVE-2026-55744
creationtimestamp| type| source ---|---|--- 2026-06-18 08:38:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokggxn5qs27...
CVE-2026-10623
creationtimestamp| type| source ---|---|--- 2026-06-18 08:01:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokeer2icw2k...
CVE-2026-12111
creationtimestamp| type| source ---|---|--- 2026-06-18 07:53:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokdwruxn624...
CVE-2026-9815
creationtimestamp| type| source ---|---|--- 2026-06-18 07:50:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokdob7lp52d...
CVE-2026-12098
The PowerPress Podcasting plugin by Blubrry plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'embed' Episode Meta Field in all versions up to, and including, 11.16.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...
CVE-2026-55740
Nur-Alam39 bus-ticket no released versions; latest commit 459cabdbeb99c00225b26e46e3c2c30ae1de7bad contains an unauthenticated SQL injection vulnerability in businfo.php. The busid parameter received via HTTP POST is concatenated directly into a MySQL query select from businfo where id=$busid...
CVE-2026-54224
creationtimestamp| type| source ---|---|--- 2026-06-18 05:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-54219...
CVE-2026-54222
creationtimestamp| type| source ---|---|--- 2026-06-18 05:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-54219 2026-06-18 15:53:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mol6qkof7z2j...
CVE-2026-54221
creationtimestamp| type| source ---|---|--- 2026-06-18 05:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-54219 2026-06-18 15:58:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mol6zj5mne2o...
CVE-2026-54220
creationtimestamp| type| source ---|---|--- 2026-06-18 05:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-54219 2026-06-18 15:43:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mol66nmcxv2t...
CVE-2026-55740
Nur-Alam39 bus-ticket no released versions; latest commit 459cabdbeb99c00225b26e46e3c2c30ae1de7bad contains an unauthenticated SQL injection vulnerability in businfo.php. The busid parameter received via HTTP POST is concatenated directly into a MySQL query select from businfo where id=$busid...
EUVD-2026-37851
Nur-Alam39 bus-ticket no released versions; latest commit 459cabdbeb99c00225b26e46e3c2c30ae1de7bad contains an unauthenticated SQL injection vulnerability in businfo.php. The busid parameter received via HTTP POST is concatenated directly into a MySQL query select from businfo where id=$busid...
EUVD-2026-37849
The Services Section Block – Showcase Service Details in Grid or Columns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'link' Block Attribute in all versions up to, and including, 1.4.4 due to insufficient input sanitization and output escaping. This makes it possible for...
EUVD-2026-37848
The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2.6. This is due to missing or incorrect nonce validation on the replacefile function. This makes it...