CVE-2026-8224

creationtimestamp| type| source ---|---|--- 2026-05-10 08:12:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlicsinm772n...

CVE-2026-8233

creationtimestamp| type| source ---|---|--- 2026-05-10 07:53:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlibpxnk5h2e 2026-09-04 14:00:05+00:00| published-proof-of-concept| https://t.me/apsecurity/1030 2026-09-05 01:00:27+00:00| published-proof-of-concept|...

CVE-2026-45373

creationtimestamp| type| source ---|---|--- 2026-05-10 07:52:37+00:00| published-proof-of-concept| https://github.com/Hmbown/DeepSeek-TUI/security/advisories/GHSA-88gh-2526-gfrr...

CVE-2026-8225

creationtimestamp| type| source ---|---|--- 2026-05-10 07:32:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mliake2qlj2q...

CVE-2026-8218

creationtimestamp| type| source ---|---|--- 2026-05-10 04:45:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlhxb4qkct2p 2026-05-10 22:05:10+00:00| seen| https://bsky.app/profile/intel.overresearched.net/post/3mljrdev7bc27...

CVE-2022-50970

creationtimestamp| type| source ---|---|--- 2026-05-10 04:16:34+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2022-50970 2026-05-10 15:39:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlj3silfkl2o...

CVE-2022-50962

creationtimestamp| type| source ---|---|--- 2026-05-10 04:16:33+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2022-50962 2026-05-10 15:00:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlizllrw432e...

CVE-2026-6735

In PHP versions 8.2. before 8.2.31, 8.3. before 8.3.31, 8.4. before 8.4.21, 8.5. before 8.5.6, due to improper sanitation of user data, it allows an attacker to compose an URL, which will cause the target to execute arbitrary JavaScript code XSS on the target's machine when the target is viewing...

CVE-2026-6735 XSS within PHP-FPM status endpoint

In PHP versions 8.2. before 8.2.31, 8.3. before 8.3.31, 8.4. before 8.4.21, 8.5. before 8.5.6, due to improper sanitation of user data, it allows an attacker to compose an URL, which will cause the target to execute arbitrary JavaScript code XSS on the target's machine when the target is viewing...

CVE-2026-45181

creationtimestamp| type| source ---|---|--- 2026-05-10 01:19:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlhlqtpypx2t...

CVE-2026-45182

creationtimestamp| type| source ---|---|--- 2026-05-10 01:09:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlhl6wvexz2e...

CVE-2021-47951: Improper Neutralization of Input During Web Page Generation

WordPress Picture Gallery 1.4.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Edit Content URL field in the Access Control settings. Attackers can enter JavaScript payloads in the plugin options that are stored in...

PT-2026-41196

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.5 Description The validate url function in backend/open webui/retrieval/web/utils.py only validates the initial URL provided by the user. Downstream HTTP clients, including sync requests, async aiohttp, and...

WordPress plugin IP2Location Country Blocker 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

WordPress plugin Picture Gallery 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

CVE-2022-50961: Improper Neutralization of Input During Web Page Generation

WordPress Plugin IP2Location Country Blocker 2.26.7 contains a stored cross-site scripting vulnerability that allows authenticated users to inject arbitrary JavaScript code through the Frontend Settings interface. Attackers can inject malicious scripts in the URL field of the Display page setting...

PT-2026-41195

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.5 Description A parsing discrepancy between the urlparse and requests libraries allows for a Server-Side Request Forgery SSRF bypass. The validate url function uses urlparse to verify the hostname; however,...

CVE-2026-45345

creationtimestamp| type| source ---|---|--- 2026-05-09 22:10:27+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-gm54-m39w-grjp 2026-05-16 01:15:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlwocnrknq2e...

CVE-2026-8194

creationtimestamp| type| source ---|---|--- 2026-05-09 22:05:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlhaua5h5m2i...

CVE-2026-42257

creationtimestamp| type| source ---|---|--- 2026-05-09 21:40:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlh7iqqghk2r 2026-05-10 12:01:25+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mliplujde42d 2026-07-18 12:01:11+00:00| seen|...