CVE-2025-46699

creationtimestamp| type| source ---|---|--- 2026-01-23 11:25:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md3loif4ux2g...

OESA-2026-1238 python-filelock security update

This package contains a single module, which implements a platform independent file locking mechanism for Python. Security Fixes: filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability exists in the SoftFileLock implementation of th...

OESA-2026-1237 python-filelock security update

This package contains a single module, which implements a platform independent file locking mechanism for Python. Security Fixes: filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability exists in the SoftFileLock implementation of th...

CVE-2026-22271

creationtimestamp| type| source ---|---|--- 2026-01-23 10:09:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md3hi2lwph27 2026-01-23 11:20:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md3lfjvosw2j...

WordPress All-in-One Video Gallery plugin <= 4.6.4 - Missing Authorization to Unauthenticated Bunny Stream Video Creation/Deletion vulnerability

Missing Authorization to Unauthenticated Bunny Stream Video Creation/Deletion vulnerability discovered by andrea bocchetti in WordPress Plugin All-in-One Video Gallery versions = 4.6.4...

CVE-2026-21524

creationtimestamp| type| source ---|---|--- 2026-01-23 07:47:39+00:00| seen| https://gist.github.com/Darkcrai86/20485358608ca278d4d824dc3d84d8d8 2026-01-23 08:04:03+00:00| seen| https://gist.github.com/Darkcrai86/150b0c4aed7835314b8d3ce105c15f45 2026-02-13 04:55:23+00:00| seen|...

CVE-2025-15522

creationtimestamp| type| source ---|---|--- 2026-01-23 07:39:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md372npr7g2i 2026-01-23 07:45:37+00:00| seen| https://gist.github.com/Darkcrai86/45581fe5e00a3e16d57fe941fead1b95...

RHSA-2026:0928

creationtimestamp| type| source ---|---|--- 2026-01-23 07:25:37+00:00| seen| https://gist.github.com/Darkcrai86/7d02f94b83ed0fc68cb95c866c3e50e7...

CVE-2026-24335

creationtimestamp| type| source ---|---|--- 2026-01-23 07:24:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md36aw5q6y2g...

CVE-2026-24337

creationtimestamp| type| source ---|---|--- 2026-01-23 07:19:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md35xkdw5o2n...

CVE-2025-45160

creationtimestamp| type| source ---|---|--- 2026-01-23 07:19:29+00:00| seen| https://gist.github.com/BEND0US/49d76897a5bb676d8c3f51425553cc32 2026-01-29 20:56:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdlofqclic2m...

CVE-2026-24338

creationtimestamp| type| source ---|---|--- 2026-01-23 07:17:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md35tfy2ke2c...

CVE-2026-24341

creationtimestamp| type| source ---|---|--- 2026-01-23 07:09:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md35fhbkuj2i...

CVE-2025-9290

creationtimestamp| type| source ---|---|--- 2026-01-23 03:24:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md2qsrsqjv26...

CVE-2026-24137

creationtimestamp| type| source ---|---|--- 2026-01-23 03:04:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md2poy464o23 2026-01-24 21:22:42+00:00| seen| https://gist.github.com/alon710/bcce36cb7d3ca802621bc6d8b450a705 2026-01-24 22:17:57+00:00| seen|...

CVE-2026-21520

creationtimestamp| type| source ---|---|--- 2026-01-23 00:02:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md2fjzsvog2x 2026-02-13 04:55:23+00:00| seen| https://bsky.app/profile/yourlamentablefriends.com/post/3meppoqajec2e 2026-02-13 04:55:29+00:00| seen|...

CVE-2022-25369

An issue was discovered in Dynamicweb before 9.12.8. An attacker can add a new administrator user without authentication. This flaw exists due to a logic issue when determining if the setup phases of the product can be run again. Once an attacker is authenticated as the new admin user they have...

LavaLite cross-site scripting vulnerabilities

LavaLite is a lightweight content management system developed under the Lavalite open source project. Versions of LavaLite 10.1.0 and earlier contained a cross-site scripting vulnerability. This vulnerability stemmed from improperly encoded HTML or JavaScript stored in the package creation and...

EUVD-2022-30040

An issue was discovered in Dynamicweb before 9.12.8. An attacker can add a new administrator user without authentication. This flaw exists due to a logic issue when determining if the setup phases of the product can be run again. Once an attacker is authenticated as the new admin user they have...

CVE-2022-25369

An issue was discovered in Dynamicweb before 9.12.8. An attacker can add a new administrator user without authentication. This flaw exists due to a logic issue when determining if the setup phases of the product can be run again. Once an attacker is authenticated as the new admin user they have...