28135 matches found
uBidAuction ่ทจ็ซ่ๆฌๆผๆด
uBidAuction is an auction website system developed by the uBidAuction company, which supports online bidding and product transaction management. Version 2.0.1 of uBidAuction has a cross-site scripting vulnerability. This vulnerability stems from the improper cleaning of the filter functions for t...
PT-2026-39490
Name of the Vulnerable Software and Affected Versions uBidAuction version 2.0.1 Description A reflected cross-site scripting issue exists in the 'posts/manage' module. The filter functionality fails to properly sanitize the date created, date from, date to, and created at parameters, enabling...
uBidAuction ่ทจ็ซ่ๆฌๆผๆด
uBidAuction is an auction website system developed by the uBidAuction company, which supports online bidding and product transaction management. Version 2.0.1 of uBidAuction has a cross-site scripting vulnerability. This vulnerability stems from the improper cleanup of the filter functions for th...
uBidAuction ่ทจ็ซ่ๆฌๆผๆด
uBidAuction is an auction website system developed by the uBidAuction company, which supports online bidding and product transaction management. Version 2.0.1 of uBidAuction has a cross-site scripting vulnerability. This vulnerability stems from the improper cleaning of the filter functions for t...
PT-2026-39492
uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the tickets/manage module. The date created, date from, date to, and created at parameters in the filter functionality are not properly sanitized, allowing remote attackers to inject malicious scripts via crafted GET...
uBidAuction ่ทจ็ซ่ๆฌๆผๆด
uBidAuction is an auction website system developed by the uBidAuction company, which supports online auctions and product transaction management. Version 2.0.1 of uBidAuction has a cross-site scripting vulnerability. This vulnerability stems from the improper cleanup of the filter functions for t...
uBidAuction ่ทจ็ซ่ๆฌๆผๆด
uBidAuction is an auction website system developed by uBidAuction Company, which supports online bidding and product transaction management. Version 2.0.1 of uBidAuction has a cross-site scripting vulnerability. This vulnerability stems from the improper cleanup of the filter functions for the...
PT-2026-39491
Name of the Vulnerable Software and Affected Versions uBidAuction version 2.0.1 Description A reflected cross-site scripting issue exists in the 'news/manage' module. The filter functionality fails to properly sanitize the date created, date from, date to, and created at parameters, enabling remo...
uBidAuction ่ทจ็ซ่ๆฌๆผๆด
uBidAuction is an auction website system developed by the uBidAuction company, which supports online auctions and product transaction management. Version 2.0.1 of uBidAuction has a cross-site scripting vulnerability. This vulnerability stems from improper cleaning of the filter functions for the...
uBidAuction ่ทจ็ซ่ๆฌๆผๆด
uBidAuction is an auction website system developed by the uBidAuction company, which supports online bidding and product transaction management. Version 2.0.1 of uBidAuction has a cross-site scripting vulnerability. This vulnerability stems from improper cleaning of the filter functions for the...
SUSE SLED15 / SLES15 Security Update : librsvg (SUSE-SU-2026:1750-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:1750-1 advisory. This update for librsvg fixes the following issue: - CVE-2026-25727: time: parsing of user-provided input by the RFC 28...
CVE-2026-8194
creationtimestamp| type| source ---|---|--- 2026-05-09 22:05:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlhaua5h5m2i...
CVE-2026-42571
creationtimestamp| type| source ---|---|--- 2026-05-09 21:49:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlh7zev7at2t 2026-05-10 00:00:43+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mlhhd4dhnd2p 2026-05-10 00:01:03+00:00| seen|...
CVE-2026-42258
creationtimestamp| type| source ---|---|--- 2026-05-09 21:18:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlh6bqgjhp2c 2026-05-10 12:01:26+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mliplvolm72y 2026-07-18 12:01:14+00:00| seen|...
CVE-2026-8186
creationtimestamp| type| source ---|---|--- 2026-05-09 14:55:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlgitldbrp2p...
CVE-2026-32683
creationtimestamp| type| source ---|---|--- 2026-05-09 12:30:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlgaq35vbe2n 2026-05-18 02:00:04+00:00| seen| https://t.me/GithubRedTeam/84618 2026-05-18 03:00:14+00:00| published-proof-of-concept|...
CVE-2026-28390 affecting package edk2 for versions less than 20240524git3e722403cd16-16
CVE-2026-28390 affecting package edk2 for versions less than 20240524git3e722403cd16-16. A patched version of the package is available...
SUSE CVE-2026-39820
Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations...
NPM: Hono has improper validation of NumericDate claims (exp, nbf, iat) in JWT verify()
NPM: Hono has improper validation of NumericDate claims exp, nbf, iat in JWT verify vulnerability discovered by ? in WordPress Npm hono versions 4.12.18...
GHSA-HM8Q-7F3Q-5F36 Hono has improper validation of NumericDate claims (exp, nbf, iat) in JWT verify()
Summary Improper validation of the JWT NumericDate claims exp, nbf, and iat in hono/utils/jwt allows tokens with non-spec-compliant claim values to silently bypass time-based checks. This issue is not exploitable by an anonymous attacker; it only manifests when a malformed claim value reaches...