CVE-2026-27168

creationtimestamp| type| source ---|---|--- 2026-02-21 00:17:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfddvo54ng25 2026-02-21 00:18:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfddwj3bfn2h 2026-02-21 03:00:29+00:00| seen|...

CVE-2026-26744

creationtimestamp| type| source ---|---|--- 2026-02-20 23:33:12+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3mfdbg4dsbt2m 2026-09-02 20:00:05+00:00| published-proof-of-concept| Telegram/MDejoZgynr8LlPCfcHLGYynTe4-nNkLjRBMRCzB6ANtEs 2026-09-03 00:00:39+00:00|...

CVE-2026-27584

creationtimestamp| type| source ---|---|--- 2026-02-20 20:34:17+00:00| published-proof-of-concept| https://github.com/actualbudget/actual/security/advisories/GHSA-m2cq-xjgm-f668 2026-02-24 17:03:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfmnirfijv2o 2026-02-25 04:10:19+00:0...

CVE-2026-27506

SVXportal version 2.5 and prior contain a stored cross-site scripting vulnerability in the user profile update workflow usersettings.php submitting to admin/updateuser.php. Authenticated users can store malicious HTML/JavaScript in fields such as Firstname, lastname, email, and imageurl, which ar...

CVE-2026-27506

SVXportal before or equal to version 2.5 contains a stored XSS in the profile update flow (user_settings.php -> admin/update_user.php). Authenticated users can inject HTML/JavaScript into profile fields (Firstname, lastname, email, image_url) that are rendered uncoded in the admin interface (a...

CVE-2026-27506 SVXportal <= 2.5 Profile Update Stored XSS

SVXportal version 2.5 and prior contain a stored cross-site scripting vulnerability in the user profile update workflow usersettings.php submitting to admin/updateuser.php. Authenticated users can store malicious HTML/JavaScript in fields such as Firstname, lastname, email, and imageurl, which ar...

CVE-2026-27506 SVXportal <= 2.5 Profile Update Stored XSS

SVXportal version 2.5 and prior contain a stored cross-site scripting vulnerability in the user profile update workflow usersettings.php submitting to admin/updateuser.php. Authenticated users can store malicious HTML/JavaScript in fields such as Firstname, lastname, email, and imageurl, which ar...

CVE-2026-27506

SVXportal version 2.5 and prior contain a stored cross-site scripting vulnerability in the user profile update workflow usersettings.php submitting to admin/updateuser.php. Authenticated users can store malicious HTML/JavaScript in fields such as Firstname, lastname, email, and imageurl, which ar...

CVE-2025-40294

creationtimestamp| type| source ---|---|--- 2026-02-20 14:25:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mfccsjc2s322 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...

CVE-2025-40304

creationtimestamp| type| source ---|---|--- 2026-02-20 14:25:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mfccsjc2s322 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen|...

CVE-2025-38383

creationtimestamp| type| source ---|---|--- 2026-02-20 14:25:22+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mfccsjc2s322...

CVE-2025-66030

creationtimestamp| type| source ---|---|--- 2026-02-20 14:25:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mfccrzs3cv2q 2026-03-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-071-03...

CVE-2026-25315

creationtimestamp| type| source ---|---|--- 2026-02-20 12:47:09+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mfc5cvcn7d2h 2026-02-20 17:14:19+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mfcman57el2m 2026-02-21 00:05:09+00:00| seen|...

GHSA-6QR9-G2XW-CW92

creationtimestamp| type| source ---|---|--- 2026-02-20 10:40:39+00:00| seen| https://gist.github.com/alon710/abc7f0686d49a0775a51f0602a0a26e0 2026-02-20 11:04:32+00:00| seen| https://bsky.app/profile/flarestart.bsky.social/post/3mfbxlf7ota22...

Cross Site Scripting (XSS)

Agora is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to insufficient file type validation in profile picture uploads, which allows an attacker to upload malicious content that executes scripts when rendered...

CVE-2026-1373

The Easy Author Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'authorprofilepictureurl' parameter in all versions up to, and including, 1.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-2689

creationtimestamp| type| source ---|---|--- 2026-02-20 04:20:11+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfbayertpa2u...

CVE-2026-26065

creationtimestamp| type| source ---|---|--- 2026-02-20 03:00:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mfb4jx6nnq2r 2026-02-20 03:00:34+00:00| seen| https://infosec.exchange/users/offseq/statuses/116100722235795041 2026-02-20 17:08:52+00:00| seen|...

CVE-2019-25353

creationtimestamp| type| source ---|---|--- 2026-02-20 03:00:19+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfb4jjlgje2l...

GHSA-6C9J-X93C-RW6J

creationtimestamp| type| source ---|---|--- 2026-02-20 02:10:39+00:00| seen| https://gist.github.com/alon710/f4eee2d51384628d064473d1a040d3d4 2026-02-20 02:40:34+00:00| seen| https://bsky.app/profile/flarestart.bsky.social/post/3mfb3galb2g2s...