58971 matches found
CVE-2026-39817
creationtimestamp| type| source ---|---|--- 2026-05-07 21:30:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlc5yhwc332k...
CVE-2026-44742
creationtimestamp| type| source ---|---|--- 2026-05-07 21:19:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlc5eyncrc2r 2026-06-19 12:45:12+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e6ba9994-41dc-45f7-b8e9-ac330a61d59b 2026-06-23...
CVE-2026-44243
creationtimestamp| type| source ---|---|--- 2026-05-07 21:17:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlc5bswnv72i 2026-05-12 21:03:25+00:00| seen| https://gist.github.com/trippersham/98c56220f8edca1dd84337d7c1d67182...
CVE-2026-6736 Authentication bypass vulnerability in GitHub Enterprise Server allowed creation of local user accounts bypassing the configured external identity provider
An authentication bypass vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to create a local user account, bypassing the configured external identity provider. When external authentication was enabled, the signup endpoint did not properly enforce th...
CVE-2026-6736
An authentication bypass vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to create a local user account, bypassing the configured external identity provider. When external authentication was enabled, the signup endpoint did not properly enforce th...
CVE-2026-8142 CVE-2026-8142
VINCE versions 3.0.38 and earlier do not properly verify the From address authenticity due to encoding confusion and use the from address for automated actions such as Ticket creation or Ticket updates...
CVE-2026-8142 CVE-2026-8142
VINCE versions 3.0.38 and earlier do not properly verify the From address authenticity due to encoding confusion and use the from address for automated actions such as Ticket creation or Ticket updates...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the referencia field in the product creation process. An attacker can execute arbitrary JavaScript in the browser of another authenticated user by injecting a crafted value into the referencia field, which i...
CVE-2026-41904
creationtimestamp| type| source ---|---|--- 2026-05-07 19:21:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlbwrjfhau2r...
CVE-2023-27573
creationtimestamp| type| source ---|---|--- 2026-05-07 19:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mlbvyckkiy2s...
CVE-2026-40003
creationtimestamp| type| source ---|---|--- 2026-05-07 19:00:14+00:00| seen| Telegram/PzhmRpnH0GKl-gQSVtV4RydjOIkDAHQ-MCr1tu85IjwQYE 2026-05-07 21:00:05+00:00| seen| Telegram/vzTACITSxs978bepVF2fAbJ-LA46ia7V8AwPJb289jK3goA...
GHSA-54PG-9963-V8VG
creationtimestamp| type| source ---|---|--- 2026-05-07 18:40:29+00:00| seen| https://gist.github.com/alon710/8afde5a27397b507920e321a8ed8bd55...
EUVD-2026-28390
Cross-Site Scripting XSS vulnerability exists in Webkul Krayin CRM v2.1.5. The application fails to sanitize user-supplied input in the comment field during Activity creation on the /admin/activities/create endpoint...
CVE-2026-44243
GitPython is a python library used to interact with Git repositories. Prior to version 3.1.48, a vulnerability in GitPython allows attackers who can supply a crafted reference path to an application using GitPython to write, overwrite, move, or delete files outside the repository’s .git directory...
CVE-2026-44243
GitPython is a python library used to interact with Git repositories. Prior to version 3.1.48, a vulnerability in GitPython allows attackers who can supply a crafted reference path to an application using GitPython to write, overwrite, move, or delete files outside the repository’s .git directory...
CVE-2026-41689
creationtimestamp| type| source ---|---|--- 2026-05-07 17:45:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbrfh5tqi2p...
Cross-site Scripting (XSS)
Overview krayin/laravel-crm is a hand tailored CRM framework built on some of the hottest opensource technologies such as Laravel a PHP framework and Vue.js a progressive Javascript framework. Affected versions of this package are vulnerable to Cross-site Scripting XSS via unsanitized input in th...
CVE-2026-8093
creationtimestamp| type| source ---|---|--- 2026-05-07 17:10:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlbph22zky2z 2026-05-11 07:46:10+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-mozilla-5 2026-05-11 12:05:22+00:00| seen|...
CVE-2026-40610
creationtimestamp| type| source ---|---|--- 2026-05-07 16:39:47+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-mcfx-4vc6-qgxv 2026-05-22 22:57:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmhztaeg2z2h...
CVE-2026-36341
Cross-Site Scripting XSS vulnerability exists in Webkul Krayin CRM v2.1.5. The application fails to sanitize user-supplied input in the comment field during Activity creation on the /admin/activities/create endpoint...