CVE-2026-3042

A vulnerability was detected in itsourcecode Event Management System 1.0. The affected element is an unknown function of the file /admin/index.php. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit is now public a...

CVE-2026-27614

Bugsink is a self-hosted error tracking tool. In versions prior to 2.0.13, an unauthenticated attacker who can submit events to a Bugsink project can store arbitrary JavaScript in an event. The payload executes only if a user explicitly views the affected Stacktrace in the web UI. When Pygments...

CVE-2026-27614

Bugsink is a self-hosted error tracking tool. In versions prior to 2.0.13, an unauthenticated attacker who can submit events to a Bugsink project can store arbitrary JavaScript in an event. The payload executes only if a user explicitly views the affected Stacktrace in the web UI. When Pygments...

CVE-2026-27614 Bugsink is vulnerable to Stored XSS via Pygments fallback in stacktrace rendering

Bugsink is a self-hosted error tracking tool. In versions prior to 2.0.13, an unauthenticated attacker who can submit events to a Bugsink project can store arbitrary JavaScript in an event. The payload executes only if a user explicitly views the affected Stacktrace in the web UI. When Pygments...

GHSA-6FX5-5CW5-4897

creationtimestamp| type| source ---|---|--- 2026-02-25 01:08:23+00:00| seen| https://gist.github.com/alon710/8e3d60e2310dc13fae41246bc5dac4c9...

CVE-2025-67491 OpenEMR has Stored XSS in ub04 helper

OpenEMR is a free and open source electronic health records and medical practice management application. Versions 5.0.0.5 through 7.0.3.4 have a stored cross-site scripting vulnerability in the ub04 helper of the billing interface. The variable $data is passed in a click event handler enclosed in...

kernel: Linux kernel Bluetooth: Denial of Service due to use-after-free in connection handling

A flaw was found in the Linux kernel's Bluetooth subsystem. A use-after-free UAF vulnerability exists in the hcidisconnectallsync function. This can occur if a Bluetooth connection is deleted while a controller event is being processed concurrently. A local attacker could potentially exploit this...

CVE-2026-2784

creationtimestamp| type| source ---|---|--- 2026-02-25 00:02:21+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfnevsrrem2c 2026-02-28 02:01:56+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfv4yg5pzm2o...

CVE-2026-2783

creationtimestamp| type| source ---|---|--- 2026-02-25 00:02:19+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfnevrqegb2o 2026-02-28 02:01:56+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfv4yg5pzm2o...

CVE-2026-2772

creationtimestamp| type| source ---|---|--- 2026-02-25 00:02:17+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfnevpneau2d 2026-02-28 02:01:52+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfv4ye2syf2g...

CVE-2026-2771

creationtimestamp| type| source ---|---|--- 2026-02-25 00:02:17+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfnevpneau2d 2026-02-28 02:01:51+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfv4ycvd6i2f...

CVE-2026-2761

creationtimestamp| type| source ---|---|--- 2026-02-25 00:02:12+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfnevnkbfq2y 2026-02-28 02:01:47+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfv4yasoc52y 2026-03-01 00:27:17+00:00| seen|...

PT-2026-21988

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 12.2 through 18.7.4 GitLab CE/EE versions 18.8 through 18.8.4 GitLab CE/EE versions 18.9 through 18.9.0 Description An unauthenticated user could potentially cause a denial of service by sending specially crafted files to...

The vulnerability of the trace_event_buffer_lock_reserve() function in the kernel/trace/trace.c module, which supports Linux operating system kernel tracing, allows a attacker to cause a service failure.

The vulnerability of the traceeventbufferlockreserve function in the kernel/trace/trace.c module, which supports Linux operating system kernel tracing, involves copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow ...

📄 MS‑EVEN TOCTOU ElfrBackupELFW Arbitrary File Write

This module exploits a Time-of-Check Time-of-Use TOCTOU vulnerability in the MS-EVEN protocol Windows Event Log service. A low-privileged authenticated user can write arbitrary files to a remote Windows machine by abusing the ElfrBackupELFW RPC function. This module strictly follows the MS-EVEN...

Bugsink 跨站脚本漏洞

Bugsink is an open-source, self-hosted bug tracking software developed by Bugsink. Versions of Bugsink prior to 2.0.13 contained a cross-site scripting vulnerability. This vulnerability stemmed from unvalidated attackers who could submit events to the project, allowing them to store arbitrary...

CVE-2026-3042

creationtimestamp| type| source ---|---|--- 2026-02-24 22:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfnacwrosh2m...

CVE-2026-23859

creationtimestamp| type| source ---|---|--- 2026-02-24 22:01:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfn66oeduh2e...

CVE-2026-2798

creationtimestamp| type| source ---|---|--- 2026-02-24 20:10:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfmxxfxrle2f...

Isso affected by Stored XSS via comment website field

Impact This is a stored Cross-Site Scripting XSS vulnerability affecting the website and author comment fields. The website field was HTML-escaped using quote=False, which left single and double quotes unescaped. Since the frontend inserts the website value directly into a single-quoted href...