64919 matches found
CERTFR-2026-ALE-006
creationtimestamp| type| source ---|---|--- 2026-07-15 14:21:07+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116924433303774121...
CVE-2025-62826
creationtimestamp| type| source ---|---|--- 2026-07-15 14:20:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqow55nlat2n...
CVE-2026-14354
creationtimestamp| type| source ---|---|--- 2026-07-15 14:20:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqow4t54qn2f 2026-07-29 16:03:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrscg7ehc52b...
CVE-2026-59235
creationtimestamp| type| source ---|---|--- 2026-07-15 13:50:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqouh5o35a2a...
CVE-2026-59236
creationtimestamp| type| source ---|---|--- 2026-07-15 13:40:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqotv6s2dw2n...
CVE-2026-8281
creationtimestamp| type| source ---|---|--- 2026-07-15 13:04:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqorvu4irb2i...
CVE-2026-47428
A flaw was found in Vitest, a testing framework. In Vitest Browser Mode, a remote attacker could craft a specific browser-runner URL that, when visited, would allow the execution of arbitrary JavaScript code within the Vitest server. This vulnerability could also lead to the recovery of the...
CVE-2026-48758
creationtimestamp| type| source ---|---|--- 2026-07-15 12:00:51+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mqoodma5yp2c 2026-07-27 03:18:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlwq6g4by2n...
ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input
A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting XSS by providing untrusted input to the Address6 constructor. When an application renders the output of...
CVE-2026-15690
creationtimestamp| type| source ---|---|--- 2026-07-15 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mqon5ostp52g 2026-07-21 08:49:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr5ggyp73z27 2026-07-21 08:49:52+00:00| seen|...
EUVD-2026-44648
The Grav API plugin grav-plugin-api before 1.0.4 does not validate the origin of the client-supplied adminbaseurl field in the POST /api/v1/auth/forgot-password endpoint. The sanitizeHttpUrl function only checks that the URL scheme is http/https and never verifies the host against the server's ow...
CVE-2026-56398
Open WebUI before 0.9.5 is vulnerable to stored XSS via the OAuth picture claim SVG data URI. The code infers MIME type from the URL extension (e.g., .svg) and ignores the server-provided Content-Type, then stores data URI labelling it as image/svg+xml. The profile image validator is bypassed in ...
CVE-2026-47992
creationtimestamp| type| source ---|---|--- 2026-07-15 10:18:35+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mqoimquynu2z...
CVE-2026-53486
A flaw was found in the decompress package for Node.js. A remote attacker can exploit this vulnerability by crafting a malicious archive. When the archive is extracted, it can create files and links outside the intended directory, leading to unauthorized reading or writing of files. This is due t...
CVE-2026-11579
creationtimestamp| type| source ---|---|--- 2026-07-15 08:28:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqoci4zafs2x...
CVE-2026-12512
creationtimestamp| type| source ---|---|--- 2026-07-15 08:18:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqobw65kbh2w 2026-07-15 12:00:10+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mqoocffj5p2e 2026-07-15 12:44:11+00:00| seen|...
CVE-2026-56287
creationtimestamp| type| source ---|---|--- 2026-07-15 07:00:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqo5leeaqi26 2026-07-15 13:05:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqorxo3uto2h 2026-07-21 00:07:06+00:00| seen|...
CVE-2026-42936
The installer of HYPER SBI 2 insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking the affected installer, arbitrary code may be executed with the privilege of the user invoking the installer...
CVE-2026-42936
The CVE-2026-42936 entry concerns the HYPER SBI 2 installer, which insecurely loads Dynamic Link Libraries. A local attacker can place a crafted DLL in the installer’s directory, enabling arbitrary code execution with the invoking user’s privileges during installation. The documented impact is hi...