24428 matches found
CVE-2021-47857 Moodle 3.10.3 - 'label' Persistent Cross Site Scripting
Moodle 3.10.3 contains a persistent cross-site scripting vulnerability in the calendar event subtitle field that allows attackers to inject malicious scripts. Attackers can craft a calendar event with malicious JavaScript in the subtitle track label to execute arbitrary code when users view the...
CVE-2026-20092
creationtimestamp| type| source ---|---|--- 2026-01-21 17:21:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcx6nqmk2d2m...
CVE-2026-1102
creationtimestamp| type| source ---|---|--- 2026-01-21 16:25:05+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mcx3ixs35a2l 2026-01-22 12:33:56+00:00| seen| https://t.me/techb0ltGenona/6069 2026-01-22 15:18:05+00:00| seen|...
CVE-2025-63648
creationtimestamp| type| source ---|---|--- 2026-01-21 16:13:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcx2upm6cw2h...
tornado: Tornado Quadratic DoS via Repeated Header Coalescing
A denial of service flaw has been discovered in the Tornado networking library. In Tornado, a single maliciously crafted HTTP request can block the server's event loop for an extended period, caused by the HTTPHeaders.add method. The function accumulates values using string concatenation when the...
Malicious Google Calendar invites could expose private data
Researchers found a way to weaponize calendar invites. They uncovered a vulnerability that allowed them to bypass Google Calendar’s privacy controls using a dormant payload hidden inside an otherwise standard calendar invite. Image courtesy of Miggo An attacker creates a Google Calendar event and...
CVE-2026-1220
creationtimestamp| type| source ---|---|--- 2026-01-21 08:31:39+00:00| seen| https://gist.github.com/Darkcrai86/939043d928607586da369730737e8c8f 2026-01-21 09:28:17+00:00| seen| https://bsky.app/profile/undercodenews.bsky.social/post/3mcwe7o6tm622 2026-01-21 16:30:31+00:00| seen|...
CVE-2026-21946
creationtimestamp| type| source ---|---|--- 2026-01-21 08:23:04+00:00| seen| https://gist.github.com/Darkcrai86/2f489cfbcc6509d80f513010abf627ab 2026-01-21 21:18:16+00:00| seen| https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875...
PT-2026-3813
Event Log Explorer 4.9.3 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted service path by placing malicious executables in specific file system locations that will be...
FSPro Labs Event Log Explorer code-related vulnerabilities
FSPro Labs Event Log Explorer is a log analysis tool developed by FSPro Labs. Version 4.9.3 of FSPro Labs Event Log Explorer contains a code vulnerability caused by an unquoted service path. This vulnerability could allow local users to execute arbitrary code and gain system privileges...
CVE-2025-49345
creationtimestamp| type| source ---|---|--- 2026-01-20 20:33:52+00:00| seen| Telegram/keysXW7hEKYIw15QdawfQpLvMANk1Gh5H-G6lI8-hSBN1c...
CVE-2025-67623
creationtimestamp| type| source ---|---|--- 2026-01-20 20:29:10+00:00| seen| Telegram/nz7PUqPKFRs6PQVGddN1LS1huDCW6kvdLvotHlomSKyBUY...
CVE-2025-64273
creationtimestamp| type| source ---|---|--- 2026-01-20 20:27:48+00:00| seen| Telegram/F6LnzldwnRjkrFeK64BAbotCmJwneB6vU8eXgtaspV2F8...
CVE-2025-60077
creationtimestamp| type| source ---|---|--- 2026-01-20 20:25:22+00:00| seen| Telegram/-hj8c2RN-l-NOBB0Do79ILK7E4TWfJqpCVYf7-bVANapUE...
CVE-2025-58710
creationtimestamp| type| source ---|---|--- 2026-01-20 20:22:11+00:00| seen| Telegram/0xDArAX3HG3crsZxcgbRQEYLhb2wCsLIArjPpvex34-6k...
CVE-2025-53430
creationtimestamp| type| source ---|---|--- 2026-01-20 20:21:03+00:00| seen| Telegram/SuRtRlcb6ZMZ215EUcyuiAtabEI5Zju1afU2PTsTiyhS6cM...
CVE-2025-49367
creationtimestamp| type| source ---|---|--- 2026-01-20 20:20:39+00:00| seen| Telegram/mSPlEBL-a29z-WQm9y89cGC0YWGO8jZk7j10EPmUhtgK4...
CVE-2025-67522
creationtimestamp| type| source ---|---|--- 2026-01-20 20:18:28+00:00| seen| Telegram/eeEIgFJFtOpWfSHGPou7-0JqyTe0i0elKSfqYAgbFVKSyA...