GHSA-3F44-XW83-3PMG

creationtimestamp| type| source ---|---|--- 2026-01-24 21:25:09+00:00| seen| https://gist.github.com/alon710/e66409c13b6f73b39a0b9aa2fbaab038 2026-01-24 22:35:03+00:00| seen| https://gist.github.com/alon710/d8fd91f8283e225a106f76c357b7f3dc 2026-01-24 22:40:38+00:00| seen|...

GHSA-6PMJ-XJXP-P8G9

creationtimestamp| type| source ---|---|--- 2026-01-24 21:23:05+00:00| seen| https://gist.github.com/alon710/8c70e7f988a1a227e1f9723ebe8d32bd 2026-01-24 22:19:56+00:00| seen| https://gist.github.com/alon710/ee6559d38739c068820837243e6a26a2 2026-01-24 22:19:58+00:00| seen|...

CVE-2025-2204

creationtimestamp| type| source ---|---|--- 2026-01-23 14:33:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md3w7z47ue2j...

CVE-2025-57787

A reflected cross-site scripting xss vulnerability exists in the modifyRoute functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...

CVE-2026-24021

creationtimestamp| type| source ---|---|--- 2026-01-21 07:18:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcw4xve6h323...

CVE-2025-58080

A reflected cross-site scripting xss vulnerability exists in the modifyHL7App functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...

CVE-2025-53516

A reflected cross-site scripting xss vulnerability exists in the downloadZip functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious url can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...

CVE-2025-54861

A reflected cross-site scripting xss vulnerability exists in the modifyCoercion functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...

CVE-2025-57787

A reflected cross-site scripting xss vulnerability exists in the modifyRoute functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...

CVE-2025-40644 Reflected Cross-Site Scripting (XSS) in QRGen's Riftzilla

Reflected Cross-Site Scripting XSS vulnerability in Riftzilla's QRGen. This vulnerability allows an attavker to execute JavaScript code in the victim's browser by sending them a malicious URL using the 'id' parameter in '/article.php'. This vulnerability can be exploited to steal sensitive user...

PT-2026-3599

Name of the Vulnerable Software and Affected Versions MedDream PACS Premium version 7.3.6.870 Description A reflected cross-site scripting xss issue exists in the emailfailedjob functionality. A crafted URL can lead to arbitrary javascript code execution. An attacker can provide a malicious URL t...

CVE-2026-23852

creationtimestamp| type| source ---|---|--- 2026-01-19 22:21:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcsoirybhl26...

GHSA-WR3C-345M-43V9

creationtimestamp| type| source ---|---|--- 2026-01-19 09:59:15+00:00| seen| https://bsky.app/profile/sublimer.mstdn.sublimer.me.ap.brid.gy/post/3mcrevnz2zq42...

CVE-2026-23735

creationtimestamp| type| source ---|---|--- 2026-01-16 15:28:29+00:00| published-proof-of-concept| https://github.com/graphql-hive/graphql-modules/security/advisories/GHSA-53wg-r69p-v3r7 2026-01-17 00:02:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mclcqwwc3g2r 2026-01-17...

CVE-2025-9014

creationtimestamp| type| source ---|---|--- 2026-01-15 18:30:42+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115900536715101652...

PT-2026-2994

Name of the Vulnerable Software and Affected Versions Web Application affected versions not specified Description A flaw exists in a web application where improper handling of a URL parameter could allow attackers to execute code in a user's browser following login. Successful exploitation may...

CVE-2023-54334

creationtimestamp| type| source ---|---|--- 2026-01-14 01:33:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcdwgm2ojz2x...

PT-2026-2222

Name of the Vulnerable Software and Affected Versions OpenProject versions prior to 16.6.2 Description OpenProject is a web-based project management software. A user with low privileges can view the full names of other users. User IDs are assigned sequentially, allowing an attacker to extract a...

CVE-2025-40154

creationtimestamp| type| source ---|---|--- 2026-01-09 13:55:27+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mbynkdmqaw2z 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...

CVE-2019-25259

creationtimestamp| type| source ---|---|--- 2026-01-08 21:03:03+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mbwuxwms342g...