6860 matches found
CVE-2026-17422
creationtimestamp| type| source ---|---|--- 2026-08-21 00:09:30+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtkhtoeben2b 2026-08-21 00:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtkiygvnyg2y 2026-08-26 18:07:07+00:00| seen|...
MINI-2V67-75PP-8PVF
Bulletin has no description...
MINI-QVJW-MWQJ-F694
Bulletin has no description...
MINI-MHCM-P3CP-4FPF
Bulletin has no description...
CVE-2026-69855
creationtimestamp| type| source ---|---|--- 2026-08-20 23:01:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtke2fn45p2o 2026-08-21 00:30:56+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mtkizz5pi42i...
MINI-4VX6-MFQ5-85G9
Bulletin has no description...
AZL-96924 CVE-2026-77643 affecting package xapian-core 1.4.26-2
A cross-site scripting vulnerability in queryparser/termgeneratorinternal.cc in Xapian xapian-core before 2.1.0 and before 1.4.32 exists due to incomplete HTML escaping by Xapian::MSet::snippet. NOTE: this issue exists because of a missed corner case of CVE-2018-0499...
DEBIAN-CVE-2026-77643
A cross-site scripting vulnerability in queryparser/termgeneratorinternal.cc in Xapian xapian-core before 2.1.0 and before 1.4.32 exists due to incomplete HTML escaping by Xapian::MSet::snippet. NOTE: this issue exists because of a missed corner case of CVE-2018-0499...
Mailpit: SMTP DATA line reader buffers over-limit input before size enforcement
Summary Mailpit's SMTP DATA reader enforces the configured MaxMessageSize only after bufio.Reader.ReadBytes'\n' has already buffered a complete DATA line. A remote unauthenticated SMTP client can send one line larger than the configured message-size cap and force memory allocation before Mailpit...
CVE-2026-77643
A cross-site scripting vulnerability in queryparser/termgeneratorinternal.cc in Xapian xapian-core before 2.1.0 and before 1.4.32 exists due to incomplete HTML escaping by Xapian::MSet::snippet. NOTE: this issue exists because of a missed corner case of CVE-2018-0499...
CVE-2026-77643
Xapian xapian-core versions before 2.1.0 and 1.4.32 are vulnerable due to incomplete HTML escaping in Xapian::MSet::snippet() within queryparser/termgenerator_internal.cc, a missed corner case of CVE-2018-0499. This allows stored XSS when snippet output is rendered in a browser. CVSS 4.4 (MEDIUM)...
CVE-2026-66788
creationtimestamp| type| source ---|---|--- 2026-08-20 19:30:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjya3jrf52b 2026-08-20 20:08:56+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtk2fjde2k25...
Incomplete Comparison with Missing Factors
Overview backpack/crud is a package that helps you build an admin interface for your Eloquent models, using Laravel 5 Affected versions of this package are vulnerable to Incomplete Comparison with Missing Factors via the color column rendering process in the Blade template, where the escaped and...
CVE-2026-71428
creationtimestamp| type| source ---|---|--- 2026-08-20 17:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjptu74su2e 2026-08-20 18:01:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtjtavyjyv27 2026-08-20 18:08:51+00:00| seen|...
MINI-32H6-946F-GCCG
Bulletin has no description...
CVE-2026-61704 link-preview-js DNS Rebinding SSRF Bypass / Incomplete Fix for CVE-2026-43897
Link Preview JS extracts web links information. Prior to 4.0.4, the resolveDNSHost mitigation in index.ts validates one resolved IP address but fetches the original hostname, allowing an attacker-controlled DNS server to return a public address during validation and a loopback or internal address...
CVE-2026-61704 link-preview-js DNS Rebinding SSRF Bypass / Incomplete Fix for CVE-2026-43897
Link Preview JS extracts web links information. Prior to 4.0.4, the resolveDNSHost mitigation in index.ts validates one resolved IP address but fetches the original hostname, allowing an attacker-controlled DNS server to return a public address during validation and a loopback or internal address...
MINI-2VJX-26F4-3MC8
Bulletin has no description...
CVE-2026-66680
creationtimestamp| type| source ---|---|--- 2026-08-20 13:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjfa2bm4a23 2026-08-20 14:08:38+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtjgb7z6ij2u...