CVE-2022-50957

creationtimestamp| type| source ---|---|--- 2026-05-10 14:45:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mliyqyf3sj2k...

CVE-2021-47951

WordPress Picture Gallery 1.4.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Edit Content URL field in the Access Control settings. Attackers can enter JavaScript payloads in the plugin options that are stored in...

CVE-2026-45371

creationtimestamp| type| source ---|---|--- 2026-05-10 12:05:37+00:00| published-proof-of-concept| https://github.com/siyuan-note/siyuan/security/advisories/GHSA-gmmv-4cc5-wr9r...

CVE-2026-8243

creationtimestamp| type| source ---|---|--- 2026-05-10 10:45:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlildj7d7c2q...

CVE-2026-8226

creationtimestamp| type| source ---|---|--- 2026-05-10 08:07:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlicjk73nx2e...

Mistune ReDoS in LINK_TITLE_RE allows denial of service with crafted Markdown titles

...

CVE-2026-8228

creationtimestamp| type| source ---|---|--- 2026-05-10 08:02:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlicalqyfi2i...

CVE-2026-8229

creationtimestamp| type| source ---|---|--- 2026-05-10 07:47:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlibf7mw772v...

CVE-2026-8227

creationtimestamp| type| source ---|---|--- 2026-05-10 07:37:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mliatcnc232o...

CVE-2026-8232

creationtimestamp| type| source ---|---|--- 2026-05-10 07:19:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mli7sxhsdd2v...

CVE-2026-8217

creationtimestamp| type| source ---|---|--- 2026-05-10 04:30:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlhwgbfuff2h...

CVE-2022-50969

creationtimestamp| type| source ---|---|--- 2026-05-10 04:16:34+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2022-50969 2026-05-10 15:08:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlj22difaf2h...

CVE-2022-50963

creationtimestamp| type| source ---|---|--- 2026-05-10 04:16:34+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2022-50963 2026-05-10 14:46:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mliytoj2kk2c...

CVE-2022-50966

creationtimestamp| type| source ---|---|--- 2026-05-10 04:16:34+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2022-50966 2026-05-10 15:44:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlj43gyge42q...

CVE-2026-6735

In PHP versions 8.2. before 8.2.31, 8.3. before 8.3.31, 8.4. before 8.4.21, 8.5. before 8.5.6, due to improper sanitation of user data, it allows an attacker to compose an URL, which will cause the target to execute arbitrary JavaScript code XSS on the target's machine when the target is viewing...

CVE-2026-6735

In PHP versions 8.2. before 8.2.31, 8.3. before 8.3.31, 8.4. before 8.4.21, 8.5. before 8.5.6, due to improper sanitation of user data, it allows an attacker to compose an URL, which will cause the target to execute arbitrary JavaScript code XSS on the target's machine when the target is viewing...

CVE-2026-8211

creationtimestamp| type| source ---|---|--- 2026-05-10 01:34:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlhmlp3n5q2r...

CVE-2026-45184

creationtimestamp| type| source ---|---|--- 2026-05-10 01:05:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlhkxbdvhd2k...

PT-2026-39536

Name of the Vulnerable Software and Affected Versions D-Link DCS-935L versions prior to 1.10.01 Description A buffer overflow can be triggered remotely via the HNAP Service. The issue exists in the SetDeviceSettings function within the '/web/cgi-bin/hnap/hnap service' endpoint when manipulating t...

PT-2026-39525

WordPress Picture Gallery 1.4.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Edit Content URL field in the Access Control settings. Attackers can enter JavaScript payloads in the plugin options that are stored in...