40358 matches found
CVE-2026-34864
creationtimestamp| type| source ---|---|--- 2026-04-13 07:28:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjedrlx6u72o...
CVE-2026-6158
creationtimestamp| type| source ---|---|--- 2026-04-13 07:18:01+00:00| published-proof-of-concept| Telegram/WZFVHGgaKyJ7TxaSM0HnzDZsEpM2ufMQ-E7g3YgMqDv7PE 2026-04-13 07:47:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjees36aws2w...
CVE-2026-34861
creationtimestamp| type| source ---|---|--- 2026-04-13 07:17:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjed4rvgs62t...
CVE-2026-34857
creationtimestamp| type| source ---|---|--- 2026-04-13 07:12:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjecureo5m2o...
CVE-2026-34859
creationtimestamp| type| source ---|---|--- 2026-04-13 07:10:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjecr5yfs22m...
CVE-2026-25205
creationtimestamp| type| source ---|---|--- 2026-04-13 05:45:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mje5zn6par27 2026-04-13 07:18:01+00:00| published-proof-of-concept| Telegram/WZFVHGgaKyJ7TxaSM0HnzDZsEpM2ufMQ-E7g3YgMqDv7PE...
BIT-GOLANG-2026-32283 Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls
If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS 1.3...
CVE-2026-34853
creationtimestamp| type| source ---|---|--- 2026-04-13 05:17:45+00:00| seen| Telegram/L25kjrz6XeZaxAo3WRm2MY3CbrP1em2RAACUofFfE68hpIg 2026-04-13 06:42:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjeb5ujhmw25 2026-06-11 03:37:05+00:00| seen|...
CVE-2026-35565
creationtimestamp| type| source ---|---|--- 2026-04-13 03:25:45+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mjdw6vo3qf2t 2026-04-13 15:25:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjf6ffpala2o...
CVE-2026-6134
creationtimestamp| type| source ---|---|--- 2026-04-13 01:06:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjdoezoegf2z 2026-04-13 01:17:28+00:00| published-proof-of-concept| Telegram/A9AkdEoDX482Ts0y8kQA9I8MkTC9694Q14KUe3E0K9rcYHU 2026-05-26 20:37:10+00:00| seen|...
CVE-2026-6136
creationtimestamp| type| source ---|---|--- 2026-04-13 01:01:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjdo435jy72t 2026-04-13 01:17:42+00:00| published-proof-of-concept| Telegram/nag6kHTmr7R2m3RBAp9Z6zI9Kn5ruvnm4vlyMwU2lthiM 2026-05-28 08:07:08+00:00| seen|...
CVE-2026-6138
creationtimestamp| type| source ---|---|--- 2026-04-13 00:44:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjdn6yuor22f 2026-04-13 00:56:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjdnt4nxlc2o 2026-04-13 01:17:42+00:00| published-proof-of-concept|...
📄 XWiki Blog Cross Site Scripting
XWiki Blog versions prior to 9.15.7 suffer from a persistent cross site scripting vulnerability via the blog post title. CVE-2025-66024: XWiki Blog Application home page vulnerable to Stored XSS via Post Title Overview | Field | Details | |---|---| | CVE ID | CVE-2025-66024 | | Severity | HIGH | ...
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 : Django vulnerabilities (USN-8154-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8154-1 advisory. Seokchan Yoon discovered that Django incorrectly handled copying memory when parsing multipart uploads with...
PT-2026-32422
If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS 1.3...
PT-2026-32492
Pachno 1.0.6 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and script code by injecting malicious payloads into POST parameters. Attackers can inject scripts through the value, comment body, article content, description, and message parameter...
Pachno 跨站脚本漏洞
Pachno is an open-source collaboration platform developed by Pachno. Version 1.0.6 of Pachno contains a cross-site scripting vulnerability, which stems from improper cleaning of POST parameters. This vulnerability may lead to storage-based cross-site scripting attacks...
📄 Pachno 1.0.6 Cross Site Scripting
Pachno version 1.0.6 suffers from persistent cross site scripting vulnerabilities. Pachno 1.0.6 Stored Cross-Site Scripting Vendor: Daniel André Eikeland Product web page: https://github.com/pachno/pachno Affected version: 1.0.6 Summary: Pachno is an open-source collaboration platform formerly...
PT-2026-32507
A security flaw has been discovered in code-projects Easy Blog Site 1.0. This affects an unknown function of the file post.php. Performing a manipulation of the argument tags results in sql injection. The attack may be initiated remotely. The exploit has been released to the public and may be use...