35260 matches found
CVE-2025-59108
creationtimestamp| type| source ---|---|--- 2026-01-26 11:54:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdd6qm6z2n2i...
CVE-2025-59090
creationtimestamp| type| source ---|---|--- 2026-01-26 11:51:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdd6la6tda2c...
EUVD-2025-206356
A local privilege escalation vulnerability has been identified in the Kaba exos 9300 System management application d9sysdef.exe. Within this application it is possible to specify an arbitrary executable as well as the weekday and start time, when the specified executable should be run with SYSTEM...
CVE-2026-1300
creationtimestamp| type| source ---|---|--- 2026-01-24 13:37:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md6dja5pwn2m...
CVE-2026-1098
creationtimestamp| type| source ---|---|--- 2026-01-24 11:03:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md62wkuoyf2g...
CVE-2026-0633
creationtimestamp| type| source ---|---|--- 2026-01-24 10:37:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md5zhdwty72c...
CVE-2026-24656
creationtimestamp| type| source ---|---|--- 2026-01-24 05:37:05+00:00| seen| https://seclists.org/oss-sec/2026/q1/112 2026-01-24 06:55:53+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3md5n3wfzjz2u 2026-01-26 05:51:15+00:00| seen|...
CVE-2025-70458
A DOM-based Cross-Site Scripting XSS vulnerability exists in the DomainCheckerApp class within domain/script.js of Sourcecodester Domain Availability Checker v1.0. The vulnerability occurs because the application improperly handles user-supplied data in the createResultElement method by using the...
CVE-2025-70457
A Remote Code Execution RCE vulnerability exists in Sourcecodester Modern Image Gallery App v1.0 within the gallery/upload.php component. The application fails to properly validate uploaded file contents. Additionally, the application preserves the user-supplied file extension during the save...
CVE-2025-70457
A Remote Code Execution RCE vulnerability exists in Sourcecodester Modern Image Gallery App v1.0 within the gallery/upload.php component. The application fails to properly validate uploaded file contents. Additionally, the application preserves the user-supplied file extension during the save...
CVE-2025-70458
A DOM-based Cross-Site Scripting XSS vulnerability exists in the DomainCheckerApp class within domain/script.js of Sourcecodester Domain Availability Checker v1.0. The vulnerability occurs because the application improperly handles user-supplied data in the createResultElement method by using the...
CVE-2026-22463
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Micro.company Form to Chat App form-to-chat allows Stored XSS.This issue affects Form to Chat App: from n/a through = 1.2.5...
CVE-2021-47906
creationtimestamp| type| source ---|---|--- 2026-01-23 20:00:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md4iid2tms2t...
CVE-2021-47903
LiteSpeed Web Server Enterprise 5.4.11 contains an authenticated command injection vulnerability in the external app configuration interface. Authenticated administrators can inject shell commands through the 'Command' parameter in the server configuration, allowing remote code execution via path...
CVE-2026-22987
creationtimestamp| type| source ---|---|--- 2026-01-23 17:04:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md46mgm2ym2i...
CVE-2021-47903 LiteSpeed Web Server Enterprise 5.4.11 - Command Injection
LiteSpeed Web Server Enterprise 5.4.11 contains an authenticated command injection vulnerability in the external app configuration interface. Authenticated administrators can inject shell commands through the 'Command' parameter in the server configuration, allowing remote code execution via path...
CVE-2021-47903
LiteSpeed Web Server Enterprise version 5.4.11 has an authenticated command injection vulnerability in the external app configuration interface. A user with administrative privileges can inject shell commands via the Command parameter, enabling remote code execution through path traversal and bas...
CVE-2025-2204
Technical details about CVE-2025-2204 are not publicly available in the provided documents. Monitor for updates.
CVE-2025-2204 XSS in Tapandsign Technologies' Tap&Sign App
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tapandsign Technologies Software Inc. Tap&Sign allows Cross-Site Scripting XSS. This issue affects Tap&Sign: through 23012026. NOTE: The vendor was contacted early about this disclosure but...