CVE-2021-47793

Telegram Desktop 2.9.2 is affected by a Denial of Service vulnerability. An attacker can crash the app by pasting an oversized message payload (a 9,000,000‑byte buffer) into the messaging interface. The vulnerability is cited as CVE-2021-47793. Connected sources indicate PoC availability (e.g., E...

CVE-2026-21914

creationtimestamp| type| source ---|---|--- 2026-01-15 21:50:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcikvobwvp2x 2026-01-15 22:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcilho7pgq2m 2026-01-15 22:12:38+00:00| seen|...

CVE-2023-7334 Changjetong T+ <= 16.x GetStoreWarehouseByStore Deserialization RCE

Changjetong T+ versions up to and including 16.x contain a .NET deserialization vulnerability in an AjaxPro endpoint that can lead to remote code execution. A remote attacker can send a crafted request to /tplus/ajaxpro/Ufida.T.CodeBehind.PriorityLevel,AppCode.ashx?method=GetStoreWarehouseByStore...

CVE-2021-47777

creationtimestamp| type| source ---|---|--- 2026-01-15 18:32:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mci7tdc7xj2x...

CVE-2021-47819

creationtimestamp| type| source ---|---|--- 2026-01-15 17:59:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mci5y6iq4r2y...

CVE-2021-47784 Cyberfox Web Browser 52.9.1 - Denial of Service (PoC)

Cyberfox Web Browser 52.9.1 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the search bar with excessive data. Attackers can generate a 9,000,000 byte payload and paste it into the search bar to trigger an application crash...

CVE-2025-14317

In Crazy Bubble Tea mobile application authenticated attacker can obtain personal information about other users by enumerating a loyaltyGuestId parameter. Server does not verify the permissions required to obtain the data. This issue was fixed in version 915 Android and 7.4.1 iOS...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003293)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003293 advisory. The kernel in Android before 2016-08-05 on Nexus 7 2013 devices allows attackers to gain privileges via a crafted application, aka internal bug 28522518. Tenable has...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002998)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002998 advisory. kernel/events/core.c in the performance subsystem in the Linux kernel before 4.0 mismanages locks during certain migrations, which allows local users to gain...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002805)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002805 advisory. The bnepaddconnection function in net/bluetooth/bnep/core.c in the Linux kernel before 3.19 does not ensure that an l2cap socket is available, which allows local use...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002743)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002743 advisory. The kernel in Android before 2016-08-05 on Nexus 7 2013 devices allows attackers to gain privileges via a crafted application, aka internal bug 28522518. Tenable has...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002830)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002830 advisory. The BPF subsystem in the Linux kernel before 4.5.5 mishandles reference counts, which allows local users to cause a denial of service use-after-free or possibly have...

CVE-2025-14556

creationtimestamp| type| source ---|---|--- 2026-01-14 20:09:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcfurbfs5o2q 2026-01-15 08:21:13+00:00| seen| https://gist.github.com/Darkcrai86/9648acbcf4ae04b18090701ad79d5a91...

sql-injection-practice

Proyecto: Inyección SQL – Blue Team Descripción del proyecto Est...

CVE-2026-23477

Rocket.Chat is an open-source, secure, fully customizable communications platform. In Rocket.Chat versions up to 6.12.0, the API endpoint GET /api/v1/oauth-apps.get is exposed to any authenticated user, regardless of their role or permissions. This endpoint returns an OAuth application, as long a...

CVE-2026-23477 Rocket.Chat Unauthorized Access to OAuth App Details

Rocket.Chat is an open-source, secure, fully customizable communications platform. In Rocket.Chat versions up to 6.12.0, the API endpoint GET /api/v1/oauth-apps.get is exposed to any authenticated user, regardless of their role or permissions. This endpoint returns an OAuth application, as long a...

CVE-2026-22694

AliasVault is a privacy-first password manager with built-in email aliasing. AliasVault Android versions 0.24.0 through 0.25.2 contained an issue in how passkey requests from Android apps were validated. Under certain local conditions, a malicious app could attempt to obtain a passkey response fo...

CVE-2026-22694 AliasVault is Missing Origin Validation in Android Passkey Credential Provider

AliasVault is a privacy-first password manager with built-in email aliasing. AliasVault Android versions 0.24.0 through 0.25.2 contained an issue in how passkey requests from Android apps were validated. Under certain local conditions, a malicious app could attempt to obtain a passkey response fo...

CVE-2026-0885

creationtimestamp| type| source ---|---|--- 2026-01-14 15:25:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mcfevvzt2i2i 2026-01-15 00:01:44+00:00| seen| https://bsky.app/profile/slackers.it/post/3mcgbqztrv32l 2026-01-15 15:20:08+00:00| seen|...

CVE-2025-14317

In Crazy Bubble Tea mobile application authenticated attacker can obtain personal information about other users by enumerating a loyaltyGuestId parameter. Server does not verify the permissions required to obtain the data. This issue was fixed in version 915 Android and 7.4.1 iOS...