23051 matches found
PT-2026-60152
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-26 ImageMagick versions prior to 6.9.13-51 Description An information disclosure issue exists when using the identify command to display a profile. If the profile value is not printable and debug output is...
PT-2026-60185
Name of the Vulnerable Software and Affected Versions F5 BIG-IP affected versions not specified Description When an HTTP/2 profile is configured on a virtual server, specific undisclosed requests can lead to increased memory resource utilization. This data plane issue allows a remote,...
PT-2026-70566
Name of the Vulnerable Software and Affected Versions Windows User Profile Service affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At t...
CVE-2026-5269
creationtimestamp| type| source ---|---|--- 2026-07-14 23:52:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnfnw7qtt2i 2026-07-15 15:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqp2wcttif2y 2026-07-27 08:46:18+00:00| seen|...
CVE-2026-48325
creationtimestamp| type| source ---|---|--- 2026-07-14 23:12:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqndfhf7vy27 2026-07-14 23:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqndpmxbgv2v 2026-07-16 06:07:06+00:00| seen|...
CVE-2026-48321
creationtimestamp| type| source ---|---|--- 2026-07-14 23:06:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnd36x7a725 2026-07-14 23:14:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqndikflja2h 2026-07-16 06:37:07+00:00| seen|...
CVE-2026-48351
creationtimestamp| type| source ---|---|--- 2026-07-14 23:01:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqncsg6o2h2j...
CVE-2026-48324
creationtimestamp| type| source ---|---|--- 2026-07-14 22:57:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqncl5chk42x 2026-07-14 23:16:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqndm3tvq72b 2026-07-15 06:00:25+00:00| seen|...
CVE-2026-15776
creationtimestamp| type| source ---|---|--- 2026-07-14 22:53:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnccss5ez2k 2026-07-16 04:45:34+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260716 2026-07-16 11:07:06+00:00| seen|...
CVE-2026-47730
Twig is a template language for PHP. From 3.0.0 until 3.26.0, Twig\Profiler\Dumper\HtmlDumper writes Profile::getTemplate and Profile::getName into HTML output without escaping, allowing attacker-controlled template or profile names to inject arbitrary HTML when a browser renders the profiler dum...
CVE-2026-48356
creationtimestamp| type| source ---|---|--- 2026-07-14 22:12:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqn7zmfnfg2f 2026-07-15 10:18:08+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mqoilwqix325 2026-07-15 14:38:21+00:00| seen|...
CVE-2026-47730
Twig: XSS in Twig\Profiler\Dumper\HtmlDumper allows attacker-controlled template/profile names to inject HTML in profiler output due to unescaped getTemplate()/getName() data. Affects Twig 3.0.0–3.26.0; fixed in 3.26.0 by escaping these values via htmlspecialchars(). No exploit details provided b...
CVE-2026-47730
Twig is a template language for PHP. From 3.0.0 until 3.26.0, Twig\Profiler\Dumper\HtmlDumper writes Profile::getTemplate and Profile::getName into HTML output without escaping, allowing attacker-controlled template or profile names to inject arbitrary HTML when a browser renders the profiler dum...
CVE-2026-47301
creationtimestamp| type| source ---|---|--- 2026-07-14 20:01:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmyqlcmbo2l 2026-07-16 12:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqr75ovixc2h 2026-07-16 13:51:39+00:00| seen|...
CVE-2026-50518
creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:04+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 21:00:04+00:00| seen| https://t.me/kasperskyb2b/2258 2026-07-14 21:06:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqn4dlo3eb2d...
CVE-2026-50659
creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:01+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0235 2026-07-14 20:34:12+00:00| seen| https://bsky.app/profile/blowdart.me/post/3mqn2jvvr2k2u 2026-07-14 20:34:27+00:00| seen|...
CVE-2026-50650
creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:00+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0235 2026-07-14 20:34:12+00:00| seen| https://bsky.app/profile/blowdart.me/post/3mqn2jvvr2k2u 2026-07-14 20:34:26+00:00| seen|...
CVE-2026-50425
Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally...
CVE-2026-50425
CVE-2026-50425: A use-after-free in Windows Internal System User Profile leads to local privilege escalation for an authorized attacker. Affected component: Windows Internal System User Profile; root cause: use-after-free; impact: gain high privileges locally with no user interaction (CVSSv3.1: A...
