CVE-2026-34416 OSCAL-GUI Reflected XSS via project parameter in oscal.php

OSCAL-GUI contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in a victim's browser by injecting malicious input through the project request parameter. Attackers can craft a malicious URL containing unsanitized input that...

CVE-2026-42599

Svelte is a performance oriented web framework. Prior to version 5.55.7, when using spread syntax to render attributes from untrusted data, event handler properties are included in the rendered HTML output. If an application spreads user-controlled or external data as element attributes, an...

EUVD-2026-35703

Svelte is a performance oriented web framework. Prior to version 5.55.7, when using spread syntax to render attributes from untrusted data, event handler properties are included in the rendered HTML output. If an application spreads user-controlled or external data as element attributes, an...

CVE-2026-42599

CVE-2026-42599 affects Svelte SSR. Prior to version 5.55.7, using spread syntax to render attributes from untrusted data may include event handler properties in the rendered HTML, enabling attackers to inject malicious event handlers that run in victims’ browsers if JavaScript is enabled and hydr...

CVE-2026-42599 Cross-site scripting via spread attributes in Svelte SSR

Svelte is a performance oriented web framework. Prior to version 5.55.7, when using spread syntax to render attributes from untrusted data, event handler properties are included in the rendered HTML output. If an application spreads user-controlled or external data as element attributes, an...

CVE-2026-42599 Cross-site scripting via spread attributes in Svelte SSR

Svelte is a performance oriented web framework. Prior to version 5.55.7, when using spread syntax to render attributes from untrusted data, event handler properties are included in the rendered HTML output. If an application spreads user-controlled or external data as element attributes, an...

CVE-2026-47652

creationtimestamp| type| source ---|---|--- 2026-06-09 15:44:28+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0181 2026-06-09 16:12:18+00:00| seen| https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review 2026-06-10 18:36:52+00:00| seen|...

CVE-2017-20247

creationtimestamp| type| source ---|---|--- 2026-06-09 13:20:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnubxyvjwn25...

CVE-2026-46317

creationtimestamp| type| source ---|---|--- 2026-06-09 13:01:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnuaxocwie2e...

CVE-2026-24315

creationtimestamp| type| source ---|---|--- 2026-06-09 12:30:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnu76qz3un2z...

ecommerce-poc

Event-Driven E-Commerce Saga POC This project is a small even...

CVE-2026-41984

creationtimestamp| type| source ---|---|--- 2026-06-09 11:23:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnu3hpxb7s2u...

CVE-2026-5068

creationtimestamp| type| source ---|---|--- 2026-06-09 08:59:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnttgws7cs2u 2026-06-09 11:18:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnu36rdyqg2e...

CVE-2026-41539

creationtimestamp| type| source ---|---|--- 2026-06-09 07:50:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mntpkynmxd2k 2026-06-30 02:28:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphxdv7q6s22 2026-06-30 02:28:19+00:00| seen|...

PT-2026-47847

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.1, esl recv event parses Content-Length with atol and passes the result straight to mallocle...

PT-2026-47875

Svelte is a performance oriented web framework. Prior to version 5.55.7, when using spread syntax to render attributes from untrusted data, event handler properties are included in the rendered HTML output. If an application spreads user-controlled or external data as element attributes, an...

PT-2026-48267

OSCAL-GUI contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in a victim's browser by injecting malicious input through the project request parameter. Attackers can craft a malicious URL containing unsanitized input that...

Svelte 跨站脚本漏洞

Svelte is an open-source approach to building web applications. Versions of Svelte prior to 5.55.7 contained a cross-site scripting vulnerability. This vulnerability stemmed from the use of extended syntax for rendering untrusted data, causing event handling properties to be included in the HTML...

CVE-2026-49141

creationtimestamp| type| source ---|---|--- 2026-06-08 21:04:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnsledm6gl2f...

CVE-2026-11691

creationtimestamp| type| source ---|---|--- 2026-06-08 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260609 2026-06-09 00:53:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnsyaoo5sp2h 2026-06-15 18:00:00+00:00| seen|...