CVE-2026-22610

creationtimestamp| type| source ---|---|--- 2026-01-10 05:03:11+00:00| seen| Telegram/Oq5Ood4NSq2MjX-UETlnapDxCUgYA-dHZPJgTTRAs320 2026-01-10 05:44:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mc2ckwz7zu2c 2026-01-13 05:31:34+00:00| seen|...

GHSA-2G22-WG49-FGV5

creationtimestamp| type| source ---|---|--- 2026-01-10 05:02:58+00:00| published-proof-of-concept| Telegram/UDMk206lgQvLt4zm60yBzpmxh6GeqSRvdRaLpn90JAOiIEo 2026-01-24 21:26:05+00:00| seen| https://gist.github.com/alon710/e76d8e58dcc89b6a3002c30580fbeb4c 2026-01-24 22:41:27+00:00| seen|...

CVE-2025-61676

creationtimestamp| type| source ---|---|--- 2026-01-10 05:02:58+00:00| published-proof-of-concept| Telegram/UDMk206lgQvLt4zm60yBzpmxh6GeqSRvdRaLpn90JAOiIEo 2026-01-24 21:26:19+00:00| seen| https://gist.github.com/alon710/cab39bb7b7e9c041bbe78dfe671c1cec 2026-01-24 22:41:41+00:00| seen|...

GHSA-2W69-QVJG-HVJX

creationtimestamp| type| source ---|---|--- 2026-01-10 04:02:20+00:00| seen| Telegram/hIscdD1HJtLSg0SDRbuSjzrqCFMwMv5SX0wjW8Bk7vM6o...

GHSA-9JCX-V3WJ-WH4M

creationtimestamp| type| source ---|---|--- 2026-01-10 04:02:20+00:00| seen| Telegram/hIscdD1HJtLSg0SDRbuSjzrqCFMwMv5SX0wjW8Bk7vM6o...

CVE-2026-22600

creationtimestamp| type| source ---|---|--- 2026-01-10 02:22:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbzxblfg6n27 2026-01-10 03:02:22+00:00| published-proof-of-concept| Telegram/Nl1nJ7oKFPgxJQcjsLBwT7qdFTbkUrNVanLI6gM4hULEEs 2026-01-10 04:09:30+00:00| seen|...

CVE-2026-21897

creationtimestamp| type| source ---|---|--- 2026-01-10 01:59:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbzvynefsd2m 2026-01-10 02:04:07+00:00| published-proof-of-concept| Telegram/rdcJ-eVVBzDoFwL5TR2qJvsWI6XIYotV57lHh9Pxh3U8ZQE...

virtualenv -- CWE-59: Improper Link Resolution Before File Access ('Link Following')

https://github.com/pypa/virtualenv/security/advisories/GHSA-597g-3phw-6986 reports: virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU Time-of-Check-Time-of-Use vulnerabilities in virtualenv allow local attackers to perform symlink-based attac...

virtualenv 竞争条件问题漏洞

Virtualenv is an open source Python virtual environment builder from Python Packaging Authority. A competing conditional issue vulnerability exists in versions prior to virtualenv 20.36.1, which stems from a TOCTOU vulnerability in the directory creation operation that could lead to a symbolic...

CVE-2025-53445

creationtimestamp| type| source ---|---|--- 2026-01-09 22:06:42+00:00| seen| Telegram/2tmB9X6H3Ti-myCGo7FZg0hXdrnaBtrok6C0Sug0L5hEs24...

CVE-2025-35050

creationtimestamp| type| source ---|---|--- 2026-01-09 19:04:43+00:00| seen| Telegram/O07TgmjcRwlDKdEqQK7l4behNusvvNt-L2WaEGxPMBowbdo...

CVE-2025-39766

creationtimestamp| type| source ---|---|--- 2026-01-09 19:04:21+00:00| seen| Telegram/uWo2DotdVh2fwtZZk9ml2peElMoxrJRVrbUKMpxrKERW9I 2026-01-09 19:04:43+00:00| seen| Telegram/O07TgmjcRwlDKdEqQK7l4behNusvvNt-L2WaEGxPMBowbdo 2026-05-14 10:00:00+00:00| seen|...

CVE-2025-15493

creationtimestamp| type| source ---|---|--- 2026-01-09 18:06:19+00:00| seen| Telegram/ggttxZlZstNJAeAGMjqlbTwrWMMy661VkhxBCQCCiwWZxQ 2026-01-09 19:04:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbz6sj2jnj2e...

CVE-2026-22196

GestSup versions prior to 3.2.60 contain a SQL injection vulnerability in ticket creation functionality. User-controlled input provided during ticket creation is incorporated into SQL queries without sufficient neutralization, allowing an authenticated attacker to manipulate database queries...

CVE-2026-22196

GestSup versions prior to 3.2.60 contain a SQL injection vulnerability in ticket creation functionality. User-controlled input provided during ticket creation is incorporated into SQL queries without sufficient neutralization, allowing an authenticated attacker to manipulate database queries...

CVE-2026-22194

GestSup versions up to and including 3.2.60 contain a cross-site request forgery CSRF vulnerability where the application does not verify the authenticity of client requests. An attacker can induce a logged-in user to submit crafted requests that perform actions with the victim's privileges. This...

CVE-2026-22194

GestSup versions up to and including 3.2.60 contain a cross-site request forgery CSRF vulnerability where the application does not verify the authenticity of client requests. An attacker can induce a logged-in user to submit crafted requests that perform actions with the victim's privileges. This...

CVE-2025-38707

creationtimestamp| type| source ---|---|--- 2026-01-09 17:04:42+00:00| seen| Telegram/M8lCkLIsJ6RguqIkbBdJSwooeArTn9SVHqn8Se6ECrpQ 2026-05-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-10...

CVE-2025-69425

creationtimestamp| type| source ---|---|--- 2026-01-09 16:52:52+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115866178180399766 2026-01-09 18:06:42+00:00| published-proof-of-concept| Telegram/gIeROQChpfUKACGacrlMOrd91yuCBo48O9eluSl9WxyqbYI 2026-01-09 18:06:54+00:00| seen|...

CVE-2026-22196

GestSup versions prior to 3.2.60 contain a SQL injection vulnerability in ticket creation functionality. User-controlled input provided during ticket creation is incorporated into SQL queries without sufficient neutralization, allowing an authenticated attacker to manipulate database queries...