GHSA-XFMP-2HF9-GFJP

creationtimestamp| type| source ---|---|--- 2026-01-16 21:11:26+00:00| seen| Telegram/cfwlrYjLd2pWKSXxa3WW-gwVhqSDyEtd8vLE4wKBNVvmw...

GHSA-53WG-R69P-V3R7

creationtimestamp| type| source ---|---|--- 2026-01-16 21:11:26+00:00| seen| Telegram/cfwlrYjLd2pWKSXxa3WW-gwVhqSDyEtd8vLE4wKBNVvmw...

CVE-2025-58890

creationtimestamp| type| source ---|---|--- 2026-01-16 21:11:18+00:00| seen| Telegram/6Zw3u2jJ6j-l0MhKMX6M89PILBn7a0n-I1SbjYyIrv-bFo...

CVE-2025-11965

creationtimestamp| type| source ---|---|--- 2026-01-16 21:11:12+00:00| seen| Telegram/v0bFlPUxaA4daJAECyFAZPTM5zTRL708CBV4pLvIHYbHtU...

CVE-2025-58879

creationtimestamp| type| source ---|---|--- 2026-01-16 21:11:12+00:00| seen| Telegram/v0bFlPUxaA4daJAECyFAZPTM5zTRL708CBV4pLvIHYbHtU...

CVE-2021-36901

creationtimestamp| type| source ---|---|--- 2026-01-16 21:03:02+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mckypdolai23...

CVE-2023-7334

creationtimestamp| type| source ---|---|--- 2026-01-16 21:03:01+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mckypdlwwy2h 2026-01-24 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2026-01-24 2026-01-27 00:00:00+00:00| exploited| The...

CVE-2025-68924

creationtimestamp| type| source ---|---|--- 2026-01-16 20:45:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mckxpay4ey2u...

CVE-2026-23622

Easy!Appointments is a self hosted appointment scheduler. In 1.5.2 and earlier, application/core/EASecurity.php::csrfverify only enforces CSRF for POST requests and returns early for non-POST methods. Several application endpoints perform state-changing operations while accepting parameters from...

CVE-2021-47841

creationtimestamp| type| source ---|---|--- 2026-01-16 20:07:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mckvmekmyf2g...

CVE-2021-47833

creationtimestamp| type| source ---|---|--- 2026-01-16 19:57:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mckv2hnz3v2c...

CVE-2021-47845

creationtimestamp| type| source ---|---|--- 2026-01-16 19:53:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mckuss3o7a2q...

CVE-2021-47816

Thecus N4800Eco NAS Server Control Panel contains a command injection vulnerability that allows authenticated attackers to execute arbitrary system commands through user management endpoints. Attackers can inject commands via username and batch user creation parameters to execute shell commands...

CVE-2021-47816 Thecus N4800Eco Nas Server Control Panel - Command Injection

Thecus N4800Eco NAS Server Control Panel contains a command injection vulnerability that allows authenticated attackers to execute arbitrary system commands through user management endpoints. Attackers can inject commands via username and batch user creation parameters to execute shell commands...

CVE-2025-67823

creationtimestamp| type| source ---|---|--- 2026-01-16 19:03:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mckrz36xtc2u...

CVE-2026-0949

PEM versions prior to 9.8.1 are affected by a stored Cross-site Scripting XSS vulnerability that allows users with access to the Manage Charts menu to inject arbitrary JavaScript when creating a new chart, which is then executed by any user accessing the chart. By default only the superuser and...

CVE-2026-0949

PEM versions prior to 9.8.1 are affected by a stored Cross-site Scripting XSS vulnerability that allows users with access to the Manage Charts menu to inject arbitrary JavaScript when creating a new chart, which is then executed by any user accessing the chart. By default only the superuser and...

CVE-2026-0949

PEM versions prior to 9.8.1 are affected by a stored Cross-site Scripting XSS vulnerability that allows users with access to the Manage Charts menu to inject arbitrary JavaScript when creating a new chart, which is then executed by any user accessing the chart. By default only the superuser and...

CVE-2026-0949

CVE-2026-0949 describes a stored XSS in PEM versions

CVE-2026-0949

PEM versions prior to 9.8.1 are affected by a stored Cross-site Scripting XSS vulnerability that allows users with access to the Manage Charts menu to inject arbitrary JavaScript when creating a new chart, which is then executed by any user accessing the chart. By default only the superuser and...