CVE-2026-21908

creationtimestamp| type| source ---|---|--- 2026-01-15 21:53:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcikzsnru22g...

CVE-2026-21906

creationtimestamp| type| source ---|---|--- 2026-01-15 21:46:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcikoaknau2y 2026-01-15 22:00:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcili2ytfq2p 2026-01-15 22:08:20+00:00| seen|...

CVE-2025-62004

creationtimestamp| type| source ---|---|--- 2026-01-15 21:08:20+00:00| seen| Telegram/pFQxzC0HcGfQDDozTmsk7R-twPB5SKoRgE9d8sDqRJYZzg...

GHSA-54V4-4685-VWRJ alextselegidis/easyappointments is Vulnerable to CSRF Protection Bypass

Summary application/core/EASecurity.php::csrfverify only enforces CSRF for POST requests and returns early for non-POST methods. Several application endpoints perform state-changing operations while accepting parameters from GET or $REQUEST, so an attacker can perform CSRF by forcing a victim's...

alextselegidis/easyappointments is Vulnerable to CSRF Protection Bypass

Summary application/core/EASecurity.php::csrfverify only enforces CSRF for POST requests and returns early for non-POST methods. Several application endpoints perform state-changing operations while accepting parameters from GET or $REQUEST, so an attacker can perform CSRF by forcing a victim's...

Arcane Has a Command Injection in Arcane Updater Lifecycle Labels That Enables RCE

Summary Arcane’s updater service supported lifecycle labels com.getarcaneapp.arcane.lifecycle.pre-update and com.getarcaneapp.arcane.lifecycle.post-update that allowed defining a command to run before or after a container update. The label value is passed directly to /bin/sh -c without sanitizati...

CVE-2026-22774

creationtimestamp| type| source ---|---|--- 2026-01-15 20:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcieqy4xwp2u 2026-01-15 20:54:55+00:00| seen| https://bsky.app/profile/isabelroses.com/post/3mcihrxhg6h2z 2026-01-16 02:26:07+00:00| seen|...

CVE-2026-23622

Easy!Appointments is a self hosted appointment scheduler. In 1.5.2 and earlier, application/core/EASecurity.php::csrfverify only enforces CSRF for POST requests and returns early for non-POST methods. Several application endpoints perform state-changing operations while accepting parameters from...

CVE-2026-23520

Arcane provides modern docker management. Prior to 1.13.0, Arcane has a command injection in the updater service. Arcane’s updater service supported lifecycle labels com.getarcaneapp.arcane.lifecycle.pre-update and com.getarcaneapp.arcane.lifecycle.post-update that allowed defining a command to r...

CVE-2021-47757

creationtimestamp| type| source ---|---|--- 2026-01-15 17:56:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mci5s72avt2y...

CVE-2025-62193

creationtimestamp| type| source ---|---|--- 2026-01-15 17:50:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mci5i4z5no2f 2026-01-15 18:27:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mci7ketomq2e 2026-01-15 20:42:35+00:00| seen|...

CVE-2021-47763

creationtimestamp| type| source ---|---|--- 2026-01-15 17:39:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mci4uha4xs2c 2026-01-24 21:24:14+00:00| seen| https://gist.github.com/alon710/3b07531c6b595c0a80bb2e3df9747d4c 2026-01-24 22:29:44+00:00| seen|...

CVE-2021-47772

creationtimestamp| type| source ---|---|--- 2026-01-15 17:34:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mci4lhjtai2c...

CVE-2025-71130

creationtimestamp| type| source ---|---|--- 2026-01-15 16:26:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115900047111207536 2026-05-10 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260511...

CVE-2025-37184

A vulnerability exists in an Orchestrator service that could allow an unauthenticated remote attacker to bypass multi-factor authentication requirements. Successful exploitation could allow an attacker to create an admin user account without the necessary multi-factor authentication, thereby...

CVE-2026-22238

The vulnerability exists in BLUVOYIX due to improper authentication in the BLUVOYIX admin APIs. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable admin API to create a new user with admin privileges. Successful...

CVE-2026-22642

creationtimestamp| type| source ---|---|--- 2026-01-15 15:12:34+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115899757567671679...

CVE-2026-22916

creationtimestamp| type| source ---|---|--- 2026-01-15 14:28:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mchs6u4i5h2x 2026-01-15 15:12:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115899757567671679...

CVE-2026-22919

creationtimestamp| type| source ---|---|--- 2026-01-15 14:18:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mchrmx7obk2o 2026-01-15 15:12:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115899757567671679...

CVE-2026-22920

creationtimestamp| type| source ---|---|--- 2026-01-15 14:13:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mchrdyrgwr2o 2026-01-15 15:12:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115899757567671679...