64988 matches found
CVE-2026-31984
creationtimestamp| type| source ---|---|--- 2026-07-09 22:37:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqap4ausyc2w 2026-07-10 17:45:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcpajcdya2s 2026-07-11 07:37:07+00:00| seen|...
CVE-2026-31981
creationtimestamp| type| source ---|---|--- 2026-07-09 22:37:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqap3mupjq2d 2026-07-10 17:42:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcp37tmox2d...
CVE-2026-14342
creationtimestamp| type| source ---|---|--- 2026-07-09 22:36:23+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqap2iz3s32s...
CVE-2026-12418
creationtimestamp| type| source ---|---|--- 2026-07-09 22:35:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaoymz6fi2d...
CVE-2026-31983
creationtimestamp| type| source ---|---|--- 2026-07-09 22:34:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaoxiphid2s 2026-07-10 17:27:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcobkhby62f...
CVE-2026-13450
creationtimestamp| type| source ---|---|--- 2026-07-09 22:32:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaotjnlbc2a...
CVE-2026-31982
creationtimestamp| type| source ---|---|--- 2026-07-09 22:31:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaorjqils2e 2026-07-10 17:26:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcoa34a5y2y...
CVE-2026-12406
creationtimestamp| type| source ---|---|--- 2026-07-09 22:30:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaoqckz5u2z...
CVE-2026-57501
Summary: CVE-2026-57501 affects Zen, a Firefox-based browser. Before version 1.21.5b, the contextual actions “Open link in glance” and “Split link in new tab” could load a page-controlled link URL with the System principal rather than the originating page’s principal, allowing a malicious page to...
CVE-2026-57501 Zen: Context-menu "Open link in glance" / "Split link in new tab" loads a page-controlled link with the System principal, bypassing the web-content scheme restriction
Zen is a firefox-based browser. Prior to 1.21.5b, Zen's glance and split-view context-menu actions, Open link in glance and Split link in new tab, load a page-controlled link URL with the System principal instead of the originating page's principal, allowing a malicious web page to place a link t...
CVE-2026-57501 Zen: Context-menu "Open link in glance" / "Split link in new tab" loads a page-controlled link with the System principal, bypassing the web-content scheme restriction
Zen is a firefox-based browser. Prior to 1.21.5b, Zen's glance and split-view context-menu actions, Open link in glance and Split link in new tab, load a page-controlled link URL with the System principal instead of the originating page's principal, allowing a malicious web page to place a link t...
CVE-2026-55424
Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, a topic "featured link" was not sufficiently normalized and escaped before being rendered in the topic list, allowing a user who can set a featured link to inject JavaScript when default Content...
CVE-2026-39243
decompress before 4.2.2 allows arbitrary hardlink creation during archive extraction, enabling file read disclosure and file corruption. When processing hardlink entries type === 'link', the x.linkname field from the archive is passed directly to fs.link without validation index.js line 113. An...
GHSA-PX5M-H76G-P7P8
creationtimestamp| type| source ---|---|--- 2026-07-09 22:12:01+00:00| seen| https://gist.github.com/alon710/7957cb9c4dd6636892863390d2a98c29...
CVE-2026-55424
Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, a topic "featured link" was not sufficiently normalized and escaped before being rendered in the topic list, allowing a user who can set a featured link to inject JavaScript when default Content...
CVE-2026-55424 Discourse: Topic featured link susceptible to stored XSS
Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, a topic "featured link" was not sufficiently normalized and escaped before being rendered in the topic list, allowing a user who can set a featured link to inject JavaScript when default Content...
CVE-2026-55424 Discourse: Topic featured link susceptible to stored XSS
Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, a topic "featured link" was not sufficiently normalized and escaped before being rendered in the topic list, allowing a user who can set a featured link to inject JavaScript when default Content...
CVE-2026-55424
CVE-2026-55424 – Discourse topic featured link stored XSS . Discourse (open-source discussion platform) prior to versions 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5 allowed a mis-normalized/undescoped topic feature link to inject JavaScript when default Content Security Policy protections were mo...
CVE-2026-45788 Discourse: Secure uploads exposed by hotlinked image copying
Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, secure uploads could be exposed by pullhotlinkedimages when an attacker knew the secured upload URL and the secureuploads site setting was enabled. This issue is fixed in versions 2026.6.0,...