PT-2026-45698

The WP Nano AD plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘blogrole link’ parameter in all versions up to, and including, 1.31 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via unbounded caching of StringLinkRelation instances. An attacker can cause denial of service by supplying a large number of unique link relation values, causing the static cache to...

CVE-2018-25434

creationtimestamp| type| source ---|---|--- 2026-06-01 23:50:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnbbijrsve26...

CVE-2025-60483

creationtimestamp| type| source ---|---|--- 2026-06-01 22:27:23+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnb4tgjcvl2a...

CVE-2026-0087

In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to hijack an arbitrary app link due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2026-45285

A flaw was found in Nextcloud. When a user shares a folder or file with a Nextcloud Team that includes an external member, the system automatically generates a public link for that external member. This link, which is not visible to the folder owner, grants the same permissions as the Team's...

CVE-2026-45281

A flaw was found in Nextcloud Server. An authenticated user, with knowledge of another user's principal URL, could exploit improper authorization controls to gain full access to that user's calendar. This allows the attacker to view and modify the victim's calendar, leading to unauthorized...

CVE-2026-0087

In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to hijack an arbitrary app link due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2026-0087

CVE-2026-0087 : The connected sources identify a logic error in Android’s DomainVerificationService.java (approvalLevelForDomainInternal) that could allow hijacking an arbitrary app link, enabling local privilege escalation without user interaction. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:...

CVE-2026-0087

In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to hijack an arbitrary app link due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2026-0087

In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to hijack an arbitrary app link due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2026-10289

creationtimestamp| type| source ---|---|--- 2026-06-01 21:14:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnayqj54cb2n...

CVE-2026-45545

creationtimestamp| type| source ---|---|--- 2026-06-01 21:04:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnay6m25l42w 2026-06-05 03:08:11+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mnj5uepyuj2f...

CVE-2026-45727

creationtimestamp| type| source ---|---|--- 2026-06-01 20:59:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnaxvnkvb32z...

CVE-2026-45729

creationtimestamp| type| source ---|---|--- 2026-06-01 20:44:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnax3vobbu2z 2026-07-22 17:00:04+00:00| seen| Telegram/tTAffE3ecNhvRTBphw7K5bpufit0HCKjFX6WbbNQmiqRs00 2026-07-23 00:00:10+00:00| published-proof-of-concept|...

CVE-2026-10286

creationtimestamp| type| source ---|---|--- 2026-06-01 20:39:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnawsjmsdr26...

CVE-2026-8206

creationtimestamp| type| source ---|---|--- 2026-06-01 20:00:04+00:00| seen| https://t.me/GithubRedTeam/86883 2026-06-01 23:00:14+00:00| seen| Telegram/WmCsGmCxw3llm8l2PpPL4TbSd7NmUffJbXR2OZgq87qhTE 2026-06-02 04:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mnbr4mqu6h2j...

CVE-2026-9319

creationtimestamp| type| source ---|---|--- 2026-06-01 19:41:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnatk6z5aa2k 2026-06-12 12:55:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mo3ry7mosb27 2026-06-16 19:25:04+00:00| seen|...

CVE-2026-8644

creationtimestamp| type| source ---|---|--- 2026-06-01 19:35:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnat7wh7co2w 2026-06-04 18:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mni7os6qr22z 2026-06-04 20:25:05+00:00| seen|...

CVE-2026-45132

creationtimestamp| type| source ---|---|--- 2026-06-01 19:22:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnasjc2rg427 2026-07-23 23:00:03+00:00| seen| Telegram/3IdoSx-1lpc2iHoFvsp2wYXyVxuQva2z1gsDIpvcW15f6s 2026-07-24 00:00:07+00:00| seen|...