59162 matches found
CVE-2020-37019
Orchard Core RC1 contains a persistent cross-site scripting vulnerability that allows remote attackers to inject malicious scripts through blog post creation. Attackers can create blog posts with embedded JavaScript in the MarkdownBodyPart.Source parameter to execute arbitrary scripts in victim...
Cross-site Scripting (XSS)
Overview OrchardCore is an application framework for building modular, multi-tenant applications on ASP.NET Core. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the MarkdownBodyPart.Source parameter during blog post creation. An attacker can execute arbitrary...
CVE-2025-62249
creationtimestamp| type| source ---|---|--- 2026-01-30 16:20:50+00:00| seen| https://gist.github.com/alon710/919ab60db860514b407694ae6583fe57...
CLSA-2026-1769775296 nodejs: Fix of 3 CVEs
CVE-2025-59465: add default error handler to TLSSocket to prevent server crash when connection is abruptly destroyed during initialization - CVE-2025-59466: fix stack overflow exception handling in asynchooks to allow catching with try-catch instead of requiring uncaughtException handlers -...
CVE-2026-22626
creationtimestamp| type| source ---|---|--- 2026-01-30 13:24:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdnfn2g55d2m...
CVE-2026-0963
creationtimestamp| type| source ---|---|--- 2026-01-30 07:23:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdmrgu75fp2v 2026-01-30 07:24:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdmrj45b4b2m 2026-01-30 07:59:39+00:00| seen|...
GHSA-VX6X-6559-X35R
creationtimestamp| type| source ---|---|--- 2026-01-30 03:50:50+00:00| seen| https://gist.github.com/alon710/1f0c6ce8ba60cfb0f8654497361725d4...
CVE-2026-1665
creationtimestamp| type| source ---|---|--- 2026-01-30 02:10:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdm7wvs5ju2m...
SUSE CVE-2026-23881
Kyverno is a policy engine designed for cloud native platform engineering teams. Versions prior to 1.16.3 and 1.15.3 have unbounded memory consumption in Kyverno's policy engine that allows users with policy creation privileges to cause denial of service by crafting policies that exponentially...
CVE-2026-25063
creationtimestamp| type| source ---|---|--- 2026-01-30 00:05:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdlywxmlnf2m...
PT-2026-5485
Name of the Vulnerable Software and Affected Versions Sistem Informasi Pengumuman Kelulusan Online version 1.0 Description The application contains a cross-site request forgery condition that permits attackers to add unauthorized admin users. This is achieved by exploiting the tambahuser.php...
Orchard Core cross-site scripting vulnerabilities
Orchard Core is an open-source modularized and multi-tenant application framework built using Asp.Net Core by the US-based Orchard Core company. It also includes a content management system Cms built on top of this framework. The Orchard Core RC1 version contained a cross-site scripting...
PT-2026-5480
Name of the Vulnerable Software and Affected Versions Code Blocks version 17.12 Description Code Blocks 17.12 contains a local buffer overflow that allows attackers to execute arbitrary code. This is achieved by crafting a malicious file name with Unicode characters. Attackers can trigger the iss...
CVE-2026-24904
creationtimestamp| type| source ---|---|--- 2026-01-29 23:37:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdlxeor6k42m...
CVE-2026-24902
creationtimestamp| type| source ---|---|--- 2026-01-29 23:30:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdlwzcmb642h...
CVE-2026-25061
creationtimestamp| type| source ---|---|--- 2026-01-29 23:27:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdlwug72qa2c...
CVE-2025-67957
creationtimestamp| type| source ---|---|--- 2026-01-29 21:23:50+00:00| seen| Telegram/SWMkSxtzyfGONtpbKHrO7Lbu0gsI-2eKqdy-ILPGWIwUjQ...
CVE-2025-67953
creationtimestamp| type| source ---|---|--- 2026-01-29 21:23:40+00:00| seen| Telegram/UaR2ziyr0ROTDspuaz15KJbbV5psJ0UObkuJOOrSYlOsrA...