CVE-2021-47800: Cross-Site Request Forgery (CSRF)

b2evolution 7.2.2 contains a cross-site request forgery vulnerability that allows attackers to modify admin account details without authentication. Attackers can craft a malicious HTML form to submit unauthorized changes to user profiles by tricking victims into loading a specially crafted webpag...

CVE-2026-1008

A stored cross-site scripting XSS vulnerability exists in the user profile text fields of Altium 365. Insufficient server-side input sanitization allows authenticated users to inject arbitrary HTML and JavaScript payloads using whitespace-based attribute parsing bypass techniques. The injected...

CVE-2026-1008 Stored Cross-Site Scripting in Altium Live User Profile Fields

A stored cross-site scripting XSS vulnerability exists in the user profile text fields of Altium 365. Insufficient server-side input sanitization allows authenticated users to inject arbitrary HTML and JavaScript payloads using whitespace-based attribute parsing bypass techniques. The injected...

CVE-2026-22909

creationtimestamp| type| source ---|---|--- 2026-01-15 13:46:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mchpthwwyb2m 2026-01-15 13:48:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mchpxi7ecd2t 2026-01-15 15:12:35+00:00| seen|...

CVE-2026-23478

creationtimestamp| type| source ---|---|--- 2026-01-15 02:06:08+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mcgipjebcv2p 2026-01-15 03:33:16+00:00| seen| https://bsky.app/profile/cyberdudebivash.bsky.social/post/3mcgnl6wnk22q 2026-01-15 12:01:11+00:00| seen|...

PT-2026-3031

Arunna 1.0.0 contains a cross-site request forgery vulnerability that allows attackers to manipulate user profile settings without authentication. Attackers can craft a malicious form to change user details, including passwords, email, and administrative privileges by tricking authenticated users...

CVE-2026-22861

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Prior to 2.3.1.2, There is a heap-based buffer overflow in SIccCalcOp::Describe at IccProfLib/IccMpeCalc.cpp. This...

Cross-site Scripting (XSS)

Overview ph7software/ph7builder is a pH7Builder. Social Dating Web App Site Builder Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Description field in user profiles. An attacker can execute arbitrary JavaScript code in the context of other users by submittin...

Phishing scammers are posting fake “account restricted” comments on LinkedIn

Recently, fake LinkedIn profiles have started posting comment replies claiming that a user has " engaged in activities that are not in compliance" with LinkedIn's policies and that their account has been " temporarily restricted" until they submit an appeal through a specified link in the comment...

TLP 授权问题漏洞

TLP is a power management software for linrunner personal developers. An authorization issue vulnerability exists in TLP version 1.9 up to and including version 1.9.1, which stems from improper authentication and could lead to a local user arbitrarily controlling power profiles and daemon log...

CVE-2026-22861

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Prior to 2.3.1.2, There is a heap-based buffer overflow in SIccCalcOp::Describe at IccProfLib/IccMpeCalc.cpp. This...

CVE-2026-22861 iccDEV has a heap-buffer-overflow in SIccCalcOp::Describe() at IccProfLib/IccMpeCalc.cpp

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Prior to 2.3.1.2, There is a heap-based buffer overflow in SIccCalcOp::Describe at IccProfLib/IccMpeCalc.cpp. This...

CVE-2025-46685

creationtimestamp| type| source ---|---|--- 2026-01-13 17:20:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcd2vf4bak2m 2026-01-13 17:21:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcd2wze6l422 2026-01-13 17:47:42+00:00| seen|...

Data broker fined after selling Alzheimer’s patient info and millions of sensitive profiles

California's privacy regulator has fined a Texas data broker $45,000 and banned it from selling Californians' personal information after it sold Alzheimer patients' data. Texan company Rickenbacher Data LLC, which does business as Datamasters, bought and resold the names, addresses, phone numbers...

CVE-2025-13774

creationtimestamp| type| source ---|---|--- 2026-01-13 13:32:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcco56ncaw2o 2026-01-13 13:45:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mccoukujgk2e 2026-01-13 13:45:52+00:00| seen|...

CVE-2025-41717

creationtimestamp| type| source ---|---|--- 2026-01-13 08:19:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcc4mr5jse2m 2026-01-13 08:19:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcc4n2adui2e 2026-01-13 08:22:14+00:00| seen|...

PT-2026-2800

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2 Description iccDEV is a set of libraries and tools for interacting with International Color Consortium ICC color management profiles. A heap-based buffer overflow exists in the SIccCalcOp::Describe function at...

CVE-2025-67282

In TIM BPM Suite/ TIM FLOW through 9.1.2 multiple Authorization Bypass vulnerabilities exists which allow a low privileged user to download password hashes of other user, access work items of other user, modify restricted content in workflows, modify the applications logo and manipulate the profi...

CVE-2026-22255

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 have a heap-buffer-overflow vulnerability in CIccCLUT::Init at IccProfLib/IccTagLut.cpp. This...

CVE-2026-21898

creationtimestamp| type| source ---|---|--- 2026-01-10 01:26:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbzu5dqnhi2q 2026-01-10 01:31:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbzug6qgwq2u 2026-01-10 02:04:07+00:00| published-proof-of-concept|...