59123 matches found
CVE-2026-39369
creationtimestamp| type| source ---|---|--- 2026-04-06 12:41:45+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-f4f9-627c-jh33 2026-04-07 20:24:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwmc4xo4l27 2026-04-07 21:22:19+00:00| seen|...
CVE-2026-3524 Authorization Bypass in Mattermost Legal Hold Plugin Due to Missing Return After Permission Check
Mattermost Plugin Legal Hold versions =1.1.4 fail to halt request processing after a failed authorization check in ServeHTTP which allows an authenticated attacker to access, create, download, and delete legal hold data via crafted API requests to the plugin's endpoints. Mattermost Advisory ID:...
CVE-2026-5642
creationtimestamp| type| source ---|---|--- 2026-04-06 11:15:48+00:00| published-proof-of-concept| Telegram/Z9ilPgM8N-vlYjxsXZCfRRqxqCtJw33K7Kit4-JTjgItxjI 2026-04-06 12:59:04+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mitcxnbmog2e 2026-04-06 14:14:06+00:00| seen|...
CVE-2026-31409
creationtimestamp| type| source ---|---|--- 2026-04-06 10:03:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3misz5o6hu425 2026-05-05 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260506 2026-08-03 05:24:22+00:00| seen...
CVE-2026-5631
creationtimestamp| type| source ---|---|--- 2026-04-06 09:16:06+00:00| published-proof-of-concept| Telegram/5ijLrALAuqXYdoOjryiznkXUmcGfws-2xPX0cuo3yo2hM 2026-04-06 10:58:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mit47mt5u52j...
CVE-2026-5615
creationtimestamp| type| source ---|---|--- 2026-04-06 06:16:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mismhitqy424 2026-04-06 07:24:22+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-5615.yaml 2026-04-11...
CVE-2026-5606
creationtimestamp| type| source ---|---|--- 2026-04-06 03:45:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mise2iigim2d...
CVE-2026-31351
An authenticated stored cross-site scripting XSS vulnerability in the creation/editing module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Title parameter...
fast-jwt 安全漏洞
fast-jwt is a JSON Web Token implementation open-sourced by Nearform. Versions of fast-jwt prior to 6.1.0 contained security vulnerabilities. These vulnerabilities stemmed from the incorrect creation of unique keys using the custom cacheKeyBuilder method, which could lead to cache conflicts and...
FeehiCMS 安全漏洞
FeehiCMS is a PHP-based CMS website building system developed by Liufee’s individual developers. The FeehiCMS v2.1.1 version contains a security vulnerability. This vulnerability stems from a storage-type cross-site scripting issue with the Title parameter used for creating/editing modules, which...
PT-2026-30652
An authenticated stored cross-site scripting XSS vulnerability in the creation/editing module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Title parameter...
PT-2026-30746
Name of the Vulnerable Software and Affected Versions AWS Research and Engineering Studio RES versions prior to 2026.03 Description An issue exists in the session creation component of AWS Research and Engineering Studio RES where unsanitized control of user-modifiable attributes could allow an...
CVE-2026-31351
An authenticated stored cross-site scripting XSS vulnerability in the creation/editing module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Title parameter...
CVE-2026-31351
An authenticated stored cross-site scripting XSS vulnerability in the creation/editing module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Title parameter...
CVE-2019-25685
creationtimestamp| type| source ---|---|--- 2026-04-05 23:38:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mirwait4tn2i...
CVE-2026-5602
creationtimestamp| type| source ---|---|--- 2026-04-05 23:21:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mirvbfbw2k2t...
EUVD-2019-20054
ASPRunner Professional 6.0.766 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by supplying an excessively long project name. Attackers can paste 180 or more characters into the Project name field during project creation to trigger an application...
CVE-2019-25659
ASPRunner Professional 6.0.766 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by supplying an excessively long project name. Attackers can paste 180 or more characters into the Project name field during project creation to trigger an application...