23641 matches found
CVE-2026-36829
creationtimestamp| type| source ---|---|--- 2026-05-19 19:02:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mma3cp2l3s2k 2026-05-19 19:02:24+00:00| seen| https://bsky.app/profile/potato.software/post/3mma3cpz45z25 2026-05-19 21:02:48+00:00| seen|...
BillaBear is Vulnerable to SQL Injection in the EventRepository
BillaBear all versions prior to Jan 2026 contains a SQL Injection vulnerability in the EventRepository. User-controlled input from metric filter names and aggregation properties is directly interpolated into SQL queries using sprintf without proper sanitization or identifier quoting. Although...
GHSA-XP6R-8PCC-XV5P BillaBear is Vulnerable to SQL Injection in the EventRepository
BillaBear all versions prior to Jan 2026 contains a SQL Injection vulnerability in the EventRepository. User-controlled input from metric filter names and aggregation properties is directly interpolated into SQL queries using sprintf without proper sanitization or identifier quoting. Although...
CVE-2026-2586
creationtimestamp| type| source ---|---|--- 2026-05-19 17:48:55+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mm7x7isn7i2q 2026-05-20 01:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmapdmmvoi2n 2026-05-21 14:37:07+00:00| seen|...
CVE-2026-47323
creationtimestamp| type| source ---|---|--- 2026-05-19 16:51:21+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mm7tylplja2s 2026-05-27 07:19:43+00:00| seen| https://bsky.app/profile/cyberowi.pl/post/3mmsxqwetty2s 2026-06-01 11:03:09+00:00| seen|...
CVE-2026-31069
BillaBear all versions prior to Jan 2026 contains a SQL Injection vulnerability in the EventRepository. User-controlled input from metric filter names and aggregation properties is directly interpolated into SQL queries using sprintf without proper sanitization or identifier quoting. Although...
cisco-hypershield
Ansible Collection: stevefulme1.ciscohypershield Ansible Col...
CVE-2025-40901
A Stored HTML Injection vulnerability was discovered in the Credentials Manager functionality due to improper validation of an input parameter. An authenticated user with administrative privileges can define a malicious identity containing HTML tags. When a victim attempts to delete the affected...
freerdp: FreeRDP has a heap-use-after-free in ainput_send_input_event
A heap buffer use after free has been discovered in FreeRDP. ainputsendinputevent caches channelcallback in a local variable and later uses it without synchronization; a concurrent channel close can free or reinitialize the callback, leading to a use after free...
CVE-2026-8726
creationtimestamp| type| source ---|---|--- 2026-05-19 12:41:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm7fzqvuki2r 2026-06-01 11:03:17+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mn7wm5btub2k...
GHSA-8JQP-QV73-395R
creationtimestamp| type| source ---|---|--- 2026-05-19 12:39:14+00:00| seen| Telegram/SPO6iT-d8-bIQWZXI60t6OwvPUIqsHGwkcNiX5JYtOrng...
GHSA-87XG-PXX2-7HVX
creationtimestamp| type| source ---|---|--- 2026-05-19 09:29:12+00:00| seen| https://bsky.app/profile/cure53.infosec.exchange.ap.brid.gy/post/3mm73btqiso62...
CVE-2026-8813
creationtimestamp| type| source ---|---|--- 2026-05-19 09:26:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm73576ws62q 2026-05-31 11:01:45+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mn5g2iuqbj2z...
EUVD-2026-30946
BillaBear all versions prior to Jan 2026 contains a SQL Injection vulnerability in the EventRepository. User-controlled input from metric filter names and aggregation properties is directly interpolated into SQL queries using sprintf without proper sanitization or identifier quoting. Although...
CVE-2026-31069
BillaBear all versions prior to Jan 2026 contains a SQL Injection vulnerability in the EventRepository. User-controlled input from metric filter names and aggregation properties is directly interpolated into SQL queries using sprintf without proper sanitization or identifier quoting. Although...
billabear 安全漏洞
Billabear is an open-source self-hosted subscription management and billing system developed by Billabear. There is a security vulnerability in Billabear, which stems from the fact that the names of user-controlled metric filters and aggregation properties in the EventRepository are directly...
Malicious code in @antv/event-emitter (npm)
Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...
PT-2026-41942
Name of the Vulnerable Software and Affected Versions BillaBear versions prior to Jan 2026 Description An issue exists in the EventRepository where user-controlled input from metric filter names and aggregation properties is directly interpolated into SQL queries using the sprintf function withou...
CVE-2026-31069
The CVE-2026-31069 entry concerns BillaBear (versions before Jan 2026) with a SQL Injection in the EventRepository. The root cause is unsafely interpolating user-controlled identifiers (filter names and aggregation property keys) into SQL via sprintf(), while values are parameterized. An authenti...
MAL-2026-3879 Malicious code in @antv/event-emitter (npm)
Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...