27114 matches found
CVE-2026-14741
HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parsedate. parsedate matches the date string against a chain of alternative regexes, and str2time delegates to it. Several of these patterns place unbounded quantifiers next to each other before a...
CVE-2026-63093
creationtimestamp| type| source ---|---|--- 2026-07-17 15:16:22+00:00| seen| https://bsky.app/profile/suriq.io/post/3mqu272jdvo24 2026-07-17 18:39:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqufkqdbbk2x 2026-07-19 10:01:08+00:00| seen|...
CVE-2026-12715 Missing Authorization in Firebase Studio allows Cross-Tenant Source Code Theft
Missing Authorization in Google Cloud Firebase Studio versions prior to 2026-04-15 on Google Cloud Platform allows an attacker to download other users' deployed source code and access sensitive data via unauthorized GCS URL signing requests. This vulnerability was patched on 15 April 2026, and no...
CVE-2026-16015
creationtimestamp| type| source ---|---|--- 2026-07-17 14:08:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtwfbya4s2e...
CVE-2026-15902
creationtimestamp| type| source ---|---|--- 2026-07-17 13:55:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqtvoejuek27 2026-07-20 04:45:47+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260720 2026-07-21 01:58:35+00:00| seen|...
CVE-2026-15905
creationtimestamp| type| source ---|---|--- 2026-07-17 13:55:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqtvoejuek27 2026-07-18 19:45:32+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116942696086498977 2026-07-19 16:35:47+00:00| seen|...
CVE-2026-15094
creationtimestamp| type| source ---|---|--- 2026-07-17 11:49:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtonqazmg2d 2026-07-21 06:00:08+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-15094.yaml...
CVE-2026-11966
creationtimestamp| type| source ---|---|--- 2026-07-17 08:12:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtcjkfvu62x...
CVE-2026-9656
creationtimestamp| type| source ---|---|--- 2026-07-17 07:45:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtayymiut27...
CVE-2026-15094
The WP Hotel Booking plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'checkindate' parameter in all versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...
CVE-2026-15094 WP Hotel Booking <= 2.3.2 - Reflected Cross-Site Scripting via 'check_in_date' Parameter
The WP Hotel Booking plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'checkindate' parameter in all versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...
CVE-2026-15094
WP Hotel Booking for WordPress, version up to 2.3.2, is vulnerable to Reflected Cross-Site Scripting via the check_in_date parameter. The root cause is insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary web scripts into pages executed when ...
EUVD-2026-45143
The WP Hotel Booking plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'checkindate' parameter in all versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...
CVE-2026-62215
creationtimestamp| type| source ---|---|--- 2026-07-17 02:49:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsqgy4pt32i...
[SECURITY] Fedora 44 Update: perl-HTTP-Date-6.08-1.fc44
This module provides functions that deal the date formats used by the HTTP protocol and then some more. Only the first two functions, time2str and str2time, are exported by default...
CVE-2026-62826
creationtimestamp| type| source ---|---|--- 2026-07-17 00:06:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqshealkar2l 2026-07-17 14:00:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqtvwo4v522y...
PT-2026-60780
HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parse date. parse date matches the date string against a chain of alternative regexes, and str2time delegates to it. Several of these patterns place unbounded quantifiers next to each other before a...
PT-2026-60717
Name of the Vulnerable Software and Affected Versions WP Hotel Booking versions prior to 2.3.3 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Reflected Cross-Site Scripting. This occurs when an attacker tricks a user into clicking a link...
CVE-2026-44174
creationtimestamp| type| source ---|---|--- 2026-07-16 23:13:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqseeoc45e2s...
CVE-2023-5968
creationtimestamp| type| source ---|---|--- 2026-07-16 19:00:22+00:00| seen| Telegram/dpmbE18R2X3GFwkSOa6JWFFXWxZYAauVOJ1P4vKBnJxqD5U 2026-07-17 00:00:39+00:00| seen| Telegram/dpmbE18R2X3GFwkSOa6JWFFXWxZYAauVOJ1P4vKBnJxqD5U 2026-07-18 00:00:11+00:00| published-proof-of-concept|...