124548 matches found
GHSA-RWP6-7W3Q-75FQ
creationtimestamp| type| source ---|---|--- 2026-06-19 09:41:32+00:00| seen| https://gist.github.com/alon710/ce6be6956edb730f85105a449ccea809...
Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
Summary Multiple vulnerabilities were addressed in IBM MQ Operator and Queue manager container images Vulnerability Details CVEID:CVE-2026-27142 DESCRIPTION: Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an...
CVE-2026-9822
creationtimestamp| type| source ---|---|--- 2026-06-19 07:49:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3momu5zpw4j2h...
CVE-2026-10735
creationtimestamp| type| source ---|---|--- 2026-06-19 07:16:13+00:00| seen| https://bsky.app/profile/ahmandonk.bsky.social/post/3momscoqoae2v 2026-07-13 13:00:07+00:00| seen| https://t.me/truesecator/8322 2026-07-14 00:00:43+00:00| exploited| https://t.me/truesecator/8322 2026-09-25...
CVE-2026-4328
The Advanced Import plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.4.6. This is due to the plugin using wpremoteget to fetch a user-supplied URL without validating that the URL does not point to internal or private network resources in th...
CVE-2026-54414 FileRise shared-folder upload path traversal allows arbitrary file write and admin takeover
FileRise before 3.16.0 is vulnerable to path traversal in the shared-folder upload endpoint /api/folder/uploadToSharedFolder.php, leading to arbitrary file write and administrator account takeover. The upload filename is validated by FolderController with basename and REGEXFILENAME, which permit...
CVE-2026-54414
FileRise before 3.16.0 is vulnerable to path traversal in the shared-folder upload endpoint /api/folder/uploadToSharedFolder.php, leading to arbitrary file write and administrator account takeover. The upload filename is validated by FolderController with basename and REGEXFILENAME, which permit...
EUVD-2026-37984
The Advanced Import plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.4.6. This is due to the plugin using wpremoteget to fetch a user-supplied URL without validating that the URL does not point to internal or private network resources in th...
CVE-2026-53854
creationtimestamp| type| source ---|---|--- 2026-06-19 04:21:14+00:00| seen| https://gist.github.com/alon710/b45b870bc10a669d4ff8530bce9819db...
CVE-2026-43994
creationtimestamp| type| source ---|---|--- 2026-06-19 03:40:46+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3momgbg7y4g27...
CVE-2026-6716
creationtimestamp| type| source ---|---|--- 2026-06-19 01:44:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mom7qsxmdr2m...
GHSA-6VVH-PXR4-25R7
creationtimestamp| type| source ---|---|--- 2026-06-19 01:41:43+00:00| seen| https://gist.github.com/alon710/f3e92e03dae92147bc7c79e5359c6c2b 2026-06-19 01:51:20+00:00| seen| https://gist.github.com/alon710/b1b22df575bfbbf1e201aedc3467bcba...
CVE-2026-56076
creationtimestamp| type| source ---|---|--- 2026-06-19 01:35:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mom7at33nr2r...
CVE-2026-50195
creationtimestamp| type| source ---|---|--- 2026-06-19 01:31:49+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mom72udh7u25 2026-06-19 09:11:46+00:00| seen| https://bsky.app/profile/canartuc.com/post/3momyrcpuo42y 2026-06-19 10:03:46+00:00| seen|...
CVE-2026-47262
creationtimestamp| type| source ---|---|--- 2026-06-19 01:31:49+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mom72udh7u25 2026-07-01 19:59:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpmckxbuhm2m 2026-07-02 10:29:25+00:00| seen|...
CVE-2026-8100
creationtimestamp| type| source ---|---|--- 2026-06-19 01:14:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mom636yl5f2e 2026-09-29 12:47:17+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117354399908091855...
A Hybrid, Multi-Layered Pipeline for Phishing and Threat Classification: Independently Validated URL and NLP Engines with a Calibrated Multi-Channel Fusion Stage
Phishing is a multi-modal threat. We present a hybrid pipeline that scores each modality with its own engine and fuses the results. Three engines are built, deployed, and independently benchmarked: a four-stage URL stack Domain Guard, lexical model, threat intelligence, and an asymmetric L2 fusio...
CVE-2017-20269: Improper Neutralization of Special Elements used in an SQL Command
Joomla! Component KissGallery 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to inject SQL commands through the component URL path. Attackers can supply malicious SQL code in the kissgallery endpoint to execute arbitrary database queries and extract sensitive...
CVE-2026-12620: Exposure of Sensitive Information to an Unauthorized Actor
The GridTime 3000 GNSS Time Server leaks the access token in the URL parameters of some endpoints. This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0...
PT-2026-51122
Name of the Vulnerable Software and Affected Versions Symfony UX Icons affected versions not specified Description The ux icon Twig function is marked as safe for HTML, which prevents Twig from escaping its output. The Icon::toHtml function inlines SVG source code directly into the page. Because...