CVE-2026-1448

creationtimestamp| type| source ---|---|--- 2026-01-27 03:22:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdeslqeakh2t...

CVE-2025-59473

creationtimestamp| type| source ---|---|--- 2026-01-27 01:57:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdentxjuro2n 2026-07-26 07:01:46+00:00| seen| https://t.me/zhatez/2398 2026-07-27 00:01:31+00:00| seen| https://t.me/zhatez/2398 2026-07-28 23:00:04+00:00| seen|...

CVE-2026-24486

creationtimestamp| type| source ---|---|--- 2026-01-27 01:31:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdemf2mwlf23 2026-01-27 03:20:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdesgpzcui2i 2026-04-30 10:01:08+00:00| seen|...

CVE-2026-24408

creationtimestamp| type| source ---|---|--- 2026-01-27 01:16:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdelkgpupa2c...

PT-2026-5034

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 7.0.4 Description OpenEMR is an electronic health records and medical practice management application. A broken access control exists in the Profile Edit endpoint. An authenticated user can modify request parameters...

Askbot security vulnerabilities

ASKBot is an open-source Q&A platform developed by ASKBOT. Versions of ASKBOT prior to 0.12.2 have security vulnerabilities; these vulnerabilities stem from improper access control, which could lead to the modification of other users’ profile images...

PT-2026-4914

Name of the Vulnerable Software and Affected Versions askbot versions prior to 0.12.2 Description An authenticated attacker with normal user permissions can modify the profile picture of other application users. Recommendations Update to a version later than 0.12.2...

PT-2026-4924

Name of the Vulnerable Software and Affected Versions Victor CMS version 1.0 Description Victor CMS version 1.0 has a file upload issue. Authenticated users can upload malicious PHP files through the profile image upload feature. An attacker can upload a PHP shell to the /img directory and execut...

Fedora 42 : glibc (2026-a2f3af8a86)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a2f3af8a86 advisory. This update switches the currency symbol for Bulgaria to the Euro. Furthermore, it addresses several security vulnerabilities: A crash when wordexp ...

CVE-2026-0810

creationtimestamp| type| source ---|---|--- 2026-01-26 21:35:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mde7755jzt2i...

CVE-2025-70368

creationtimestamp| type| source ---|---|--- 2026-01-26 21:21:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mde6ffn2yt2t...

CVE-2025-9520

creationtimestamp| type| source ---|---|--- 2026-01-26 21:18:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mde6aj7zyz2t...

CVE-2026-24440

creationtimestamp| type| source ---|---|--- 2026-01-26 20:26:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mde3dqqpmt2m...

CVE-2026-24436

creationtimestamp| type| source ---|---|--- 2026-01-26 20:16:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mde2rtwezj2g...

CVE-2026-22582

creationtimestamp| type| source ---|---|--- 2026-01-26 20:04:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mde23s76a623...

CVE-2020-36959

creationtimestamp| type| source ---|---|--- 2026-01-26 20:00:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mddzujyacx2r...

CVE-2020-36953

creationtimestamp| type| source ---|---|--- 2026-01-26 19:57:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mddzp5yavb2i...

CVE-2025-70982

creationtimestamp| type| source ---|---|--- 2026-01-26 18:18:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mddu6bf34c23 2026-01-26 19:54:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mddzkblfim26...

CVE-2020-36960

Forma LMS 2.3 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts into user profile first and last name fields. Attackers can craft scripts like 'alertdocument.cookie' to execute arbitrary JavaScript when the profile is viewed by other users...

CVE-2020-36960 Forma LMS 2.3 - 'First & Last Name' Stored Cross-Site Scripting

Forma LMS 2.3 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts into user profile first and last name fields. Attackers can craft scripts like 'alertdocument.cookie' to execute arbitrary JavaScript when the profile is viewed by other users...