40091 matches found
CVE-2026-9144
creationtimestamp| type| source ---|---|--- 2026-05-20 21:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmcsfpa4pg2c...
CVE-2026-24218
creationtimestamp| type| source ---|---|--- 2026-05-20 20:52:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmcrw542q32e 2026-05-22 22:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmhwoqlnxh2l 2026-07-23 15:37:06+00:00| seen|...
CVE-2026-33137
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki Platform is a generic wiki platform. In versions starting with 15.10.6 and prior to 18.1.0-rc-1, 17.10.3, 17.4.9, and 16.10.17, the POST /wikis/wikiName API executes a XAR import without...
CVE-2026-9084
creationtimestamp| type| source ---|---|--- 2026-05-20 19:37:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmcnpje5ms2p...
CVE-2026-20199
creationtimestamp| type| source ---|---|--- 2026-05-20 19:00:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmclofeilq2k 2026-07-23 12:16:40+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrcsxagkhl2e...
EUVD-2026-31157
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki Platform is a generic wiki platform. In versions prior to 18.1.0-rc-1, 17.10.3, 17.4.9, and 16.10.17, the POST /wikis/wikiName API executes a XAR import without performing any...
CVE-2026-33137
CVE-2026-33137 — XWiki Platform : The issue affects XWiki Platform where, in versions prior to 18.1.0-rc-1, 17.10.3, 17.4.9, and 16.10.17, the POST /wikis/{wikiName} API performs a XAR import without authentication or authorization checks, allowing an unauthenticated attacker to create or update ...
CVE-2026-33137
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki Platform is a generic wiki platform. In versions starting with 15.10.6 and prior to 18.1.0-rc-1, 17.10.3, 17.4.9, and 16.10.17, the POST /wikis/wikiName API executes a XAR import without...
CVE-2026-20171
creationtimestamp| type| source ---|---|--- 2026-05-20 18:47:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmckxnd7wn2h 2026-07-23 12:18:09+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrcszvdsr52x...
CVE-2026-44925
creationtimestamp| type| source ---|---|--- 2026-05-20 18:42:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmcknh7ixm2e...
MAL-2026-4360 Malicious code in @aledan007/tester (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab03e3eef2f59f358cdaacedf2d9facb12077110c5402ad36aad6e3581e66439 The bundled server file dist/server/index.js contains a hardcoded reference to the attacker-controlled domain https://evil.attacker-example.com...
EUVD-2026-31150
TeleJSON prior to 6.0.0 contains a DOM-based cross-site scripting vulnerability in the parse function that allows attackers to execute arbitrary JavaScript by delivering a crafted JSON payload containing a malicious constructor-name property value. The custom reviver passes the constructor name...
CVE-2026-47099
TeleJSON prior to 6.0.0 contains a DOM-based cross-site scripting vulnerability in the parse function that allows attackers to execute arbitrary JavaScript by delivering a crafted JSON payload containing a malicious constructor-name property value. The custom reviver passes the constructor name...
CVE-2026-47099 TeleJSON < 6.0.0 DOM-based XSS via parse() Function
TeleJSON prior to 6.0.0 contains a DOM-based cross-site scripting vulnerability in the parse function that allows attackers to execute arbitrary JavaScript by delivering a crafted JSON payload containing a malicious constructor-name property value. The custom reviver passes the constructor name...
CVE-2025-15369
creationtimestamp| type| source ---|---|--- 2026-05-20 17:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mmcgqexd632c...
crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages
A flaw was found in the crypto/tls package within the Go golang standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock,...
GHSA-53M7-2WRH-Q839
creationtimestamp| type| source ---|---|--- 2026-05-20 16:56:46+00:00| seen| https://bsky.app/profile/Whiskeyomega.cupoftea.social.ap.brid.gy/post/3mmceqyeaiq72 2026-05-20 21:03:40+00:00| seen| https://bsky.app/profile/tesaguri.fedibird.com.ap.brid.gy/post/3mmcsknmcbx22...
CVE-2026-45443
creationtimestamp| type| source ---|---|--- 2026-05-20 15:06:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmc6l7vybf2i...