491 matches found
CVE-2026-13330
creationtimestamp| type| source ---|---|--- 2026-08-08 19:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mslru2eia72i...
CVE-2026-48093 Code Embed - Contributor Stored Cross-Site Scripting via Remote URL Embed
The Code Embed WordPress plugin prior to version 2.6.1 is vulnerable to stored Cross-Site Scripting XSS through the external URL embed feature in post content. The vulnerable code scans rendered content for URL embed tokens, fetches the remote URL, and inserts the remote response body into the pa...
GHSA-GX4C-2HQX-CW2R
creationtimestamp| type| source ---|---|--- 2026-08-06 08:31:35+00:00| seen| https://gist.github.com/alon710/8a116e77ebf57ab04c0fd9d4c43203c2 2026-08-25 18:39:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117157604721602110...
EUVD-2026-53600
Relative Path Traversal vulnerability in livebook-dev livebook allows an attacker-authored notebook to write a file with attacker-controlled content to an arbitrary path. A .livemd notebook can declare fileentries metadata, each entry carrying a name. Every path that creates a file entry through...
CVE-2026-61486
creationtimestamp| type| source ---|---|--- 2026-08-05 14:50:07+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/eyof55exdtdoe...
CVE-2026-18900
creationtimestamp| type| source ---|---|--- 2026-08-05 08:53:13+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msd5nfsevf2u...
CVE-2026-14838 Session Token Exposure in URL Leading to Account Takeover in Bilin Software's HUMANIST Digital Human Resources
Use of GET request method with sensitive query strings vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Session Hijacking. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...
CVE-2026-57669
creationtimestamp| type| source ---|---|--- 2026-07-31 04:44:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrw5fetvn42q...
CVE-2026-57862 Kanboard 1.2.52 and prior SSRF Filter Bypass via Hexadecimal IP Notation
Kanboard 1.2.52 and prior contains a server-side request forgery vulnerability that allows authenticated users to bypass SSRF protections by supplying hexadecimal IP address notation in user-controlled URLs. Attackers can submit hexadecimal-encoded internal IP addresses through the web link...
CVE-2026-54363
creationtimestamp| type| source ---|---|--- 2026-07-30 13:32:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrukgjtuwq2i...
CVE-2026-57862: Server-Side Request Forgery (SSRF)
Kanboard 1.2.52 and prior contains a server-side request forgery vulnerability that allows authenticated users to bypass SSRF protections by supplying hexadecimal IP address notation in user-controlled URLs. Attackers can submit hexadecimal-encoded internal IP addresses through the web link...
CVE-2026-65946
creationtimestamp| type| source ---|---|--- 2026-07-29 14:39:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrs5qvduop2x...
CVE-2026-66396
creationtimestamp| type| source ---|---|--- 2026-07-27 18:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnia5azfv2a 2026-07-30 04:56:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrtnltbwyb2j...
GHSA-JVXP-QMX7-GJPX
creationtimestamp| type| source ---|---|--- 2026-07-25 04:31:18+00:00| seen| https://gist.github.com/alon710/5da01f85fee825f05b5c606f0085a6c9...
CVE-2026-14172
creationtimestamp| type| source ---|---|--- 2026-07-24 12:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrfcjrb42s2x...
CVE-2026-57784
creationtimestamp| type| source ---|---|--- 2026-07-23 12:58:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrcvbbtcr72s...
CVE-2026-60254
creationtimestamp| type| source ---|---|--- 2026-07-21 23:26:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6xgiapqi2k 2026-07-23 16:49:41+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-25 19:37:07+00:00| seen|...
CVE-2026-60229
creationtimestamp| type| source ---|---|--- 2026-07-21 22:26:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6u36yys42a 2026-07-23 16:48:54+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-26 03:37:07+00:00| seen|...
CVE-2026-16359
creationtimestamp| type| source ---|---|--- 2026-07-21 20:56:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6p27frgc24 2026-07-22 04:45:58+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-22 09:40:04+00:00| see...