27688 matches found
CVE-2026-9806
creationtimestamp| type| source ---|---|--- 2026-05-28 10:56:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvudynin22p 2026-08-02 21:14:35+00:00| seen| https://t.me/GithubRedTeam/96334 2026-08-03 01:01:23+00:00| seen| https://t.me/GithubRedTeam/96334 2026-08-03 05:00:03+00:00|...
CVE-2026-7862
creationtimestamp| type| source ---|---|--- 2026-05-28 10:53:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvu746vgy2e 2026-05-28 16:01:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwffqixuf2e...
CVE-2026-9039
creationtimestamp| type| source ---|---|--- 2026-05-28 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-148-08 2026-05-28 22:08:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwzw4g35425 2026-07-24 14:24:47+00:00| seen|...
CVE-2026-40425
creationtimestamp| type| source ---|---|--- 2026-05-28 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-148-01...
CVE-2025-48516
creationtimestamp| type| source ---|---|--- 2026-05-28 03:01:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116649970541941297...
CVE-2026-4888
creationtimestamp| type| source ---|---|--- 2026-05-28 02:49:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmuz4qomi52p...
CVE-2026-45361
creationtimestamp| type| source ---|---|--- 2026-05-28 02:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmuwrpmrwn2u...
CVE-2026-8915
creationtimestamp| type| source ---|---|--- 2026-05-28 01:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116649612164274667 2026-05-28 01:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmuuq7gg262p 2026-05-28 02:54:06+00:00| seen|...
CVE-2026-44930
creationtimestamp| type| source ---|---|--- 2026-05-28 00:02:18+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mmupsheol22m 2026-05-29 13:10:09+00:00| seen| https://t.me/bdufstecru/3204 2026-06-20 21:07:08+00:00| seen|...
CVE-2026-45136
creationtimestamp| type| source ---|---|--- 2026-05-27 23:19:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmunfckcpg2p...
CVE-2026-42197
creationtimestamp| type| source ---|---|--- 2026-05-27 22:28:41+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mmukl5eklo2x...
CVE-2026-44709
creationtimestamp| type| source ---|---|--- 2026-05-27 22:02:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuj3vojqv2q...
CVE-2026-5509
creationtimestamp| type| source ---|---|--- 2026-05-27 20:26:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmudq2zsso2h...
CVE-2026-44886 Pi.Alert: Web Interface Vulnerable to Unauthenticated Blind SQL Injection
Pi.Alert is a WIFI / LAN intruder detector with web service monitoring. From 2024-06-29 to before 2026-05-07, the web application endpoint is vulnerable to SQL injection. The /pialert/php/server/devices.php route accepts requests from unauthenticated users when the action URL parameter is set to...
CVE-2026-44886 Pi.Alert: Web Interface Vulnerable to Unauthenticated Blind SQL Injection
Pi.Alert is a WIFI / LAN intruder detector with web service monitoring. From 2024-06-29 to before 2026-05-07, the web application endpoint is vulnerable to SQL injection. The /pialert/php/server/devices.php route accepts requests from unauthenticated users when the action URL parameter is set to...
GHSA-HH27-HF48-9F5Q LiquidJS has a memory and render limit bypass via unbounded width padding in `date` filter (strftime)
Summary The date filter's strftime implementation parses width specifiers like %9999999d and forwards the captured width unchecked into pad/padStart in src/util/underscore.ts. The pad loop performs unbounded string concatenation without consulting the Context's memoryLimit or renderLimit, so a...
Allocation of Resources Without Limits or Throttling
Overview liquidjs is an A simple, expressive, safe and Shopify compatible template engine in pure JavaScript. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the date filter in filters/date.ts and the strftime formatter in...
LiquidJS has a memory and render limit bypass via unbounded width padding in `date` filter (strftime)
Summary The date filter's strftime implementation parses width specifiers like %9999999d and forwards the captured width unchecked into pad/padStart in src/util/underscore.ts. The pad loop performs unbounded string concatenation without consulting the Context's memoryLimit or renderLimit, so a...
CVE-2026-40914
creationtimestamp| type| source ---|---|--- 2026-05-27 17:32:33+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmtzzmt3ah2e 2026-05-29 11:39:38+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mmyhafj65s2p...