CVE-2026-58453

creationtimestamp| type| source ---|---|--- 2026-07-01 18:03:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpm43gkeax2q 2026-07-02 04:38:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn7kvczst2l...

CVE-2025-36323

creationtimestamp| type| source ---|---|--- 2026-07-01 17:56:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpm3o2pzsi24...

net/url: Incorrect parsing of IPv6 host literals in net/url

The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...

CVE-2026-34106

creationtimestamp| type| source ---|---|--- 2026-07-01 17:21:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mplzpzlhhm26 2026-07-02 08:27:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnmej5alh2u...

CVE-2026-34098

Guardian language-system fails to sanitize the id GET parameter before inserting it into HTML source and form action attributes in media.php lines 119, 129. An authenticated attacker can craft a URL that injects script tags executing in the victim's browser session...

CVE-2026-58520

URL redirection to untrusted site 'open redirect' vulnerability in The Wikimedia Foundation Mediawiki - UrlShortener Extension allows Cross-Site Flashing. This issue affects Mediawiki - UrlShortener Extension: from before 1.43.9, 1.44.6, 1.45.4...

CVE-2026-54399

creationtimestamp| type| source ---|---|--- 2026-07-01 16:56:39+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mplydnj46p2w 2026-07-02 04:41:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn7qpaahw2r 2026-07-02 07:46:44+00:00| seen|...

CVE-2026-24248

creationtimestamp| type| source ---|---|--- 2026-07-01 16:35:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mplx6mxczo2p 2026-07-02 04:34:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn7downsd2l...

CVE-2026-58025

creationtimestamp| type| source ---|---|--- 2026-07-01 16:26:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mplwmq2mzg2y 2026-07-02 02:49:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmzi6sza72o 2026-07-02 04:32:41+00:00| seen|...

EUVD-2026-41061

Guardian language-system passes the name GET parameter directly into an unsanitized SQL query in designer.php line 124: SELECT FROM complex WHERE name='".$GET'name'."'. An authenticated attacker can perform error-based SQL injection to extract database contents...

CVE-2026-34098

Guardian language-system fails to sanitize the id GET parameter before inserting it into HTML source and form action attributes in media.php lines 119, 129. An authenticated attacker can craft a URL that injects script tags executing in the victim's browser session...

CVE-2026-34097

Guardian language-system fails to sanitize the id GET parameter before inserting it into multiple HTML form action attributes in textfile.php lines 94, 101, 323, 403, 826, 852. An authenticated attacker can craft a URL that injects script tags executing in the victim's browser session...

CVE-2026-24247

creationtimestamp| type| source ---|---|--- 2026-07-01 16:01:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mplvbnh36e2i 2026-07-02 04:34:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn7d2yb3a2o...

CVE-2026-6678

creationtimestamp| type| source ---|---|--- 2026-07-01 16:00:12+00:00| seen| https://infosec.place/objects/cf6e553c-bb60-4c89-9f17-6f2b54a2754a...

CVE-2026-58028

creationtimestamp| type| source ---|---|--- 2026-07-01 15:52:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mplurpetfu26 2026-07-02 02:51:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmzkujtyx27 2026-07-02 04:35:02+00:00| seen|...

CVE-2026-34993

creationtimestamp| type| source ---|---|--- 2026-07-01 15:13:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplslnu2cj2t 2026-07-03 00:08:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppaxkjiaf2c...

EUVD-2026-41032

Improper input validation vulnerability in Wikimedia Foundation UrlShortener. This vulnerability is associated with program files includes/UrlShortenerUtils.Php...

CVE-2026-13706 UrlShortener extension url validation can be bypassed due to difference between php url parsing and WHATWG

Improper input validation vulnerability in Wikimedia Foundation UrlShortener. This vulnerability is associated with program files includes/UrlShortenerUtils.Php...

CVE-2026-13706 UrlShortener extension url validation can be bypassed due to difference between php url parsing and WHATWG

Improper input validation vulnerability in Wikimedia Foundation UrlShortener. This vulnerability is associated with program files includes/UrlShortenerUtils.Php...

CVE-2026-13706

The CVE-2026-13706 entry concerns Wikimedia Foundation UrlShortener with an improper input validation issue in the UrlShortenerUtils.Php component. According to the NVD entry, the flaw yields a HIGH-severity impact across confidentiality, integrity, and availability (C:H/I:H/A:H) with network att...