CVE-2026-0949

PEM versions prior to 9.8.1 are affected by a stored Cross-site Scripting XSS vulnerability that allows users with access to the Manage Charts menu to inject arbitrary JavaScript when creating a new chart, which is then executed by any user accessing the chart. By default only the superuser and...

CVE-2026-0949

CVE-2026-0949 describes a stored XSS in PEM versions

CVE-2026-0949

PEM versions prior to 9.8.1 are affected by a stored Cross-site Scripting XSS vulnerability that allows users with access to the Manage Charts menu to inject arbitrary JavaScript when creating a new chart, which is then executed by any user accessing the chart. By default only the superuser and...

CVE-2025-14435

creationtimestamp| type| source ---|---|--- 2026-01-16 15:35:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mckgewsovi2x...

CVE-2026-23735

creationtimestamp| type| source ---|---|--- 2026-01-16 15:28:29+00:00| published-proof-of-concept| https://github.com/graphql-hive/graphql-modules/security/advisories/GHSA-53wg-r69p-v3r7 2026-01-17 00:02:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mclcqwwc3g2r 2026-01-17...

CVE-2025-14510

creationtimestamp| type| source ---|---|--- 2026-01-16 14:01:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mckb5ds3ao2b 2026-01-16 15:45:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mckgwvbrva2e 2026-01-30 18:36:22+00:00| published-proof-of-concept|...

CVE-2026-22876

creationtimestamp| type| source ---|---|--- 2026-01-16 12:15:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mck3aludb22o...

CVE-2026-20759

creationtimestamp| type| source ---|---|--- 2026-01-16 12:04:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mck2mvez7s2q 2026-01-16 14:01:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mckb5sy2ox27...

CVE-2025-14822

creationtimestamp| type| source ---|---|--- 2026-01-16 11:25:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcjygfecue2y...

OESA-2026-1187 python-virtualenv security update

Virtualenv is a tool to create isolated Python environments. Since Python 3.3, a subset of it has been integrated into the standard library under the venv module. Note though, that the venv module does not offer all features of this library e.g. cannot create bootstrap scripts, cannot create...

CVE-2026-0913

creationtimestamp| type| source ---|---|--- 2026-01-16 10:17:51+00:00| seen| https://gist.github.com/Darkcrai86/5f21defab8cad4cd28fbee61884fe692 2026-01-16 11:59:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mck2dwvfc52u 2026-03-31 15:56:04+00:00| seen|...

CVE-2025-14844

creationtimestamp| type| source ---|---|--- 2026-01-16 09:54:13+00:00| seen| https://gist.github.com/Darkcrai86/6f52ab341fb429621991e742e432ca84 2026-01-16 11:44:28+00:00| seen| https://gist.github.com/Darkcrai86/a487b183a65b626789a86bfa85de1223 2026-01-16 12:05:47+00:00| seen|...

CVE-2025-15527

creationtimestamp| type| source ---|---|--- 2026-01-16 08:23:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcjoamz4w32q 2026-01-16 10:22:58+00:00| seen| https://gist.github.com/Darkcrai86/e6cf0efd1c1e0ecb71907c4b7c784f5f...

CVE-2025-14853

creationtimestamp| type| source ---|---|--- 2026-01-16 08:03:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcjn4t7vhx22...

CVE-2026-23769

creationtimestamp| type| source ---|---|--- 2026-01-16 07:48:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcjmd24o732o...

CVE-2025-12957

creationtimestamp| type| source ---|---|--- 2026-01-16 07:43:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcjlznzxoc2e 2026-01-16 12:14:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115904718084472700 2026-01-16 14:05:54+00:00| seen|...

Exploit for Improper Input Validation in Atlassian Confluence_Data_Center

🛡️ CVE-2023-22515: Confluence 권한 상승 취약점 심층 분석 !IMPORTANT...

Exploit for Improper Input Validation in Atlassian Confluence_Data_Center

CVE-2023-22515: Confluence Data Center & Server 권한 상승 취약점 분석 보...

CVE-2025-64769

creationtimestamp| type| source ---|---|--- 2026-01-16 02:33:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcj2q3trr62q...

CVE-2021-47779

Dolibarr ERP-CRM 14.0.2 contains a stored cross-site scripting vulnerability in the ticket creation module that allows low-privilege users to inject malicious scripts. Attackers can craft a specially designed ticket message with embedded JavaScript that triggers when an administrator copies the...