24441 matches found
CVE-2025-23915
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in roninwp FAT Event Lite fat-event-lite allows PHP Local File Inclusion.This issue affects FAT Event Lite: from n/a through = 1.1...
CVE-2025-23699
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in techmix Event Countdown Timer Plugin by TechMix event-countdown-timer allows Reflected XSS.This issue affects Event Countdown Timer Plugin by TechMix: from n/a through = 1.4...
CVE-2026-0772
creationtimestamp| type| source ---|---|--- 2026-01-09 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-038/ 2026-01-23 05:57:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md2zejlbhd2a 2026-01-23 05:58:33+00:00| seen|...
CVE-2025-67004
creationtimestamp| type| source ---|---|--- 2026-01-09 03:23:07+00:00| seen| https://gist.github.com/thepiyushkumarshukla/d01f8004c43692f18c75548f4739955a 2026-01-09 16:58:48+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115866201478859132 2026-01-09 18:36:13+00:00| seen|...
GHSA-2MWC-H2MG-V6P8
creationtimestamp| type| source ---|---|--- 2026-01-08 22:13:35+00:00| published-proof-of-concept| Telegram/Njdg7hNd6kVHrE8zyDhSRVDaVv1qeC9aHNV71Bz262lH4E 2026-01-24 22:43:29+00:00| seen| https://gist.github.com/alon710/5a5fd0c0cf4a2b079f4cae91831c6b4c...
EUVD-2026-1489
OPEXUS eCASE Audit allows an authenticated attacker to save JavaScript in the "A or SIC Number" field within the Project Setup functionality. The JavaScript is executed whenever another user views the project. Fixed in OPEXUS eCASE Audit 11.14.2.0...
CVE-2026-22246
Mastodon is a free, open-source social network server based on ActivityPub. Mastodon 4.3 added notifications of severed relationships, allowing end-users to inspect the relationships they lost as the result of a moderation action. The code allowing users to download lists of severed relationships...
CVE-2026-21895
creationtimestamp| type| source ---|---|--- 2026-01-08 16:01:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbwe4bkhic2g 2026-01-24 21:26:52+00:00| seen| https://gist.github.com/alon710/7ff8ff77e1550d03234add83f2deb924 2026-01-24 22:42:15+00:00| seen|...
CVE-2025-68887
creationtimestamp| type| source ---|---|--- 2026-01-08 12:39:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbvyt2keeo2u 2026-01-08 17:14:54+00:00| seen| Telegram/UlThGoX58f6Wkop7awnZC8Rf8gpxLvneuRy9futglmX9vHQ...
CVE-2025-13504
creationtimestamp| type| source ---|---|--- 2026-01-08 11:11:08+00:00| seen| https://gist.github.com/Darkcrai86/073704a5aea1c5dd635ceb516cdd91a2 2026-01-08 18:12:54+00:00| seen| Telegram/EtPMuYPkez1urTV-f9PU12-wdM8HozF7eLvC6FzMc5P0Qh8...
CVE-2025-14358
creationtimestamp| type| source ---|---|--- 2026-01-08 11:10:42+00:00| seen| https://gist.github.com/Darkcrai86/0f2f091b398e976b070c08d02729cf54 2026-01-08 18:12:54+00:00| seen| Telegram/EtPMuYPkez1urTV-f9PU12-wdM8HozF7eLvC6FzMc5P0Qh8 2026-01-08 18:13:20+00:00| seen|...
CVE-2025-23993
creationtimestamp| type| source ---|---|--- 2026-01-08 11:04:30+00:00| seen| https://gist.github.com/Darkcrai86/dcaa77fb0d471bb6845bd247de69bc12 2026-01-08 18:14:03+00:00| seen| Telegram/QyFpM2X3HRwxFyvKWHhAGriV3mvzlfutO8QeREOhFaNbkdw 2026-01-10 03:09:13+00:00| seen|...
CVE-2025-67914
creationtimestamp| type| source ---|---|--- 2026-01-08 11:01:29+00:00| seen| https://gist.github.com/Darkcrai86/07f5d4ef4b2851a5aba7de5c1c28ab24 2026-01-08 16:59:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbwhfcznii2t 2026-01-08 17:00:29+00:00| seen|...
CVE-2026-21894
creationtimestamp| type| source ---|---|--- 2026-01-08 11:01:09+00:00| seen| Telegram/wglSmFthAobarYZ5lKlTDy3be09zcc68zd-F7c4mDs3nfFs 2026-01-08 11:01:23+00:00| published-proof-of-concept| Telegram/2H0tuRFHJAYb3wZdMSBr18E38TWvMjuQyl8zYKGkwJ2kf8 2026-01-08 13:39:52+00:00| seen|...
GHSA-7GRM-H62G-5M97
creationtimestamp| type| source ---|---|--- 2026-01-08 11:01:09+00:00| seen| Telegram/wglSmFthAobarYZ5lKlTDy3be09zcc68zd-F7c4mDs3nfFs...
GHSA-MHPG-C27V-6MXR
creationtimestamp| type| source ---|---|--- 2026-01-08 11:01:09+00:00| seen| Telegram/wglSmFthAobarYZ5lKlTDy3be09zcc68zd-F7c4mDs3nfFs...
CVE-2026-21872 NiceGUI apps are vulnerable to XSS which uses `ui.sub_pages` and render arbitrary user-provided links
NiceGUI is a Python-based UI framework. From versions 2.22.0 to 3.4.1, an unsafe implementation in the click event listener used by ui.subpages, combined with attacker-controlled link rendering on the page, causes XSS when the user actively clicks on the link. This issue has been patched in versi...
CLSA-2026-1767864313 kernel: Fix of 46 CVEs
mm: hugetlb: fix UAF in hugetlbhandleuserfault CVE-2022-50630 - drm/amdkfd: fix potential kgdmem UAFs CVE-2023-53816 - net/mlx5e: Fix deadlock in tc route query code CVE-2023-53591 - PCI: Fix pcideviceispresent for VFs by checking PF CVE-2022-50636 - wifi: ath11k: fix monitor mode bringup crash...