27684 matches found
Malicious code in date-fmt-helper-xz (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b384650ec0fabdd01a7dfc513cccd25156611a04c17ba0c435b950ddb9215777 date-fmt-helper-xz ships a postinstall.js that runs automatically on npm install. The script opens a TCP connection to the hardcoded remote host...
Malicious code in date-fmt-utils-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ae88f68f30ebd69a595537393ce95c4ce5e543b558572769fa2c608fa1b1b0d The package presents itself as a date-formatting utility, but its index.js is a trivial cover and a source comment explicitly labels the library as a...
CVE-2026-60075
A flaw was found in Date::Manip for Perl. An attacker could exploit a vulnerability in the parsetime function by providing a specially crafted input string containing long sequences of whitespace. This could lead to excessive CPU consumption due to inefficient processing, resulting in a Denial of...
WP Hotel Booking <= 2.3.2 - Cross-Site Scripting
The WP Hotel Booking plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'checkindate' parameter in all versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...
Lotus Domino R5 and R6 WebMail - Information Disclosure
Lotus Domino R5 and R6 WebMail with 'Generate HTML for all fields' enabled which is by default allows remote attackers to read the HTML source to obtain sensitive information including the password hash in the HTTPPassword field, the password change date in the HTTPPasswordChangeDate field, and t...
CVE-2026-44741
Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore. Versions prior to 2.3.6 and 1.7.18 have a SQL injection vulnerability in Pimcore's translation grid date filter — the user-supplied property field from the filter JSON is interpolated directly into a UNIXTIMESTAMPDATEFROMUNIXTIME...
CVE-2026-44741
Summary of CVE-2026-44741 / GHSA-h4ph-crvj-9h92: The Pimcore Admin Classic Bundle contains a SQL injection in the translation grid date filter where the user-supplied property field is interpolated into a SQL expression (UNIX_TIMESTAMP(DATE(FROM_UNIXTIME(...)))) without parameterization. Affected...
EUVD-2026-57357
Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore. Versions prior to 2.3.6 and 1.7.18 have a SQL injection vulnerability in Pimcore's translation grid date filter — the user-supplied property field from the filter JSON is interpolated directly into a UNIXTIMESTAMPDATEFROMUNIXTIME...
CVE-2026-44741 Pimcore Admin Classic Bundle Vulnerable to SQL Injection in Translation Grid Date Filter via Unsanitized Property Parameter
Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore. Versions prior to 2.3.6 and 1.7.18 have a SQL injection vulnerability in Pimcore's translation grid date filter — the user-supplied property field from the filter JSON is interpolated directly into a UNIXTIMESTAMPDATEFROMUNIXTIME...
Description of the security update for Office Online Server: July 14, 2026 (KB5002884)
None None...
CVE-2026-65545
creationtimestamp| type| source ---|---|--- 2026-08-10 11:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mspxxl6kic2o 2026-08-11 03:21:54+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3msrnwhptkf2b 2026-08-11 07:16:09+00:00| seen|...
Security update for perl-Date-Manip
This update for perl-Date-Manip fixes the following issues: CVE-2026-60074: corrupted dates returned when processing non-ASCII decimal digits that pass the numeric range tests in check bsc1273063. CVE-2026-60075: CPU exhaustion due to quadratic backtracking in the unanchored time substitution in...
CVE-2026-61959
creationtimestamp| type| source ---|---|--- 2026-08-10 09:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msprazlbii2z 2026-08-11 05:16:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msrucszi4l2f...
CVE-2026-60074
A flaw was found in Date::Manip. This vulnerability allows an attacker to provide specially crafted input containing non-ASCII decimal digits to the Date::Manip library for Perl. The library's parsing logic incorrectly processes these digits, truncating the input and resulting in an inaccurate da...
CVE-2026-19383
creationtimestamp| type| source ---|---|--- 2026-08-10 02:37:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2fofomjudpidj...
CVE-2026-65517
creationtimestamp| type| source ---|---|--- 2026-08-10 00:16:18+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msot3onbxd2w 2026-08-10 20:16:11+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msqw5ba4yb2o...
CVE-2026-19368
creationtimestamp| type| source ---|---|--- 2026-08-09 22:48:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/idhvgetbit6xd...
CVE-2022-2200
creationtimestamp| type| source ---|---|--- 2026-08-09 04:23:36+00:00| seen| https://t.me/onelab1337/2324 2026-08-10 00:00:29+00:00| published-proof-of-concept| https://t.me/onelab1337/2324...