EUVD-2024-36557

It was identified that under certain specific preconditions, an API key that was originally created with a specific privileges could be subsequently used to create new API keys that have elevated privileges...

CVE-2026-1453

A missing authentication for critical function vulnerability in KiloView Encoder Series could allow an unauthenticated attacker to create or delete administrator accounts. This vulnerability can grant the attacker full administrative control over the product...

CVE-2022-2290

creationtimestamp| type| source ---|---|--- 2026-01-30 21:02:55+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mdo7a2hxjf2v...

CVE-2026-23835 LobeHub Vulnerable to Improper Authorization in Presigned Upload

LobeHub is an open source human-and-AI-agent network. Prior to version 1.143.3, the file upload feature in Knowledge Base File Upload does not validate the integrity of the upload request, allowing users to intercept and modify the request parameters. As a result, it is possible to create arbitra...

CVE-2026-23835

LobeHub is an open source human-and-AI-agent network. Prior to version 1.143.3, the file upload feature in Knowledge Base File Upload does not validate the integrity of the upload request, allowing users to intercept and modify the request parameters. As a result, it is possible to create arbitra...

CVE-2026-1689

creationtimestamp| type| source ---|---|--- 2026-01-30 19:17:59+00:00| seen| Telegram/xCNGj1TTbKvLiecfleQbdSYCUg38GbVRhl26GliyFWoGt0...

CVE-2017-16743

creationtimestamp| type| source ---|---|--- 2026-01-30 19:02:30+00:00| seen| https://gist.github.com/aw-junaid/e5393ee0715383c3f6ffefc141c7b487 2026-08-25 16:24:58+00:00| seen| https://gist.github.com/bbrk364/c0171ce39dd4dd9700b98e3aedec0f0c...

CVE-2017-16744

creationtimestamp| type| source ---|---|--- 2026-01-30 19:02:30+00:00| seen| https://gist.github.com/aw-junaid/e5393ee0715383c3f6ffefc141c7b487 2026-08-25 16:24:58+00:00| seen| https://gist.github.com/bbrk364/c0171ce39dd4dd9700b98e3aedec0f0c...

CVE-2026-25050

creationtimestamp| type| source ---|---|--- 2026-01-30 18:09:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdnvjsgiyq2i...

CVE-2020-37019

Orchard Core RC1 contains a persistent cross-site scripting vulnerability that allows remote attackers to inject malicious scripts through blog post creation. Attackers can create blog posts with embedded JavaScript in the MarkdownBodyPart.Source parameter to execute arbitrary scripts in victim...

Cross-site Scripting (XSS)

Overview OrchardCore is an application framework for building modular, multi-tenant applications on ASP.NET Core. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the MarkdownBodyPart.Source parameter during blog post creation. An attacker can execute arbitrary...

CVE-2025-62249

creationtimestamp| type| source ---|---|--- 2026-01-30 16:20:50+00:00| seen| https://gist.github.com/alon710/919ab60db860514b407694ae6583fe57...

CLSA-2026-1769775296 nodejs: Fix of 3 CVEs

CVE-2025-59465: add default error handler to TLSSocket to prevent server crash when connection is abruptly destroyed during initialization - CVE-2025-59466: fix stack overflow exception handling in asynchooks to allow catching with try-catch instead of requiring uncaughtException handlers -...

CVE-2026-22626

creationtimestamp| type| source ---|---|--- 2026-01-30 13:24:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdnfn2g55d2m...

CVE-2026-0963

creationtimestamp| type| source ---|---|--- 2026-01-30 07:23:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdmrgu75fp2v 2026-01-30 07:24:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdmrj45b4b2m 2026-01-30 07:59:39+00:00| seen|...

GHSA-VX6X-6559-X35R

creationtimestamp| type| source ---|---|--- 2026-01-30 03:50:50+00:00| seen| https://gist.github.com/alon710/1f0c6ce8ba60cfb0f8654497361725d4...

CVE-2026-1665

creationtimestamp| type| source ---|---|--- 2026-01-30 02:10:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdm7wvs5ju2m...

SUSE CVE-2026-23881

Kyverno is a policy engine designed for cloud native platform engineering teams. Versions prior to 1.16.3 and 1.15.3 have unbounded memory consumption in Kyverno's policy engine that allows users with policy creation privileges to cause denial of service by crafting policies that exponentially...

CVE-2026-25063

creationtimestamp| type| source ---|---|--- 2026-01-30 00:05:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdlywxmlnf2m...

PT-2026-5485

Name of the Vulnerable Software and Affected Versions Sistem Informasi Pengumuman Kelulusan Online version 1.0 Description The application contains a cross-site request forgery condition that permits attackers to add unauthorized admin users. This is achieved by exploiting the tambahuser.php...