65429 matches found
PT-2026-45698
The WP Nano AD plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘blogrole link’ parameter in all versions up to, and including, 1.31 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via unbounded caching of StringLinkRelation instances. An attacker can cause denial of service by supplying a large number of unique link relation values, causing the static cache to...
CVE-2018-25434
creationtimestamp| type| source ---|---|--- 2026-06-01 23:50:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnbbijrsve26...
CVE-2025-60483
creationtimestamp| type| source ---|---|--- 2026-06-01 22:27:23+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnb4tgjcvl2a...
CVE-2026-0087
In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to hijack an arbitrary app link due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
CVE-2026-45285
A flaw was found in Nextcloud. When a user shares a folder or file with a Nextcloud Team that includes an external member, the system automatically generates a public link for that external member. This link, which is not visible to the folder owner, grants the same permissions as the Team's...
CVE-2026-45281
A flaw was found in Nextcloud Server. An authenticated user, with knowledge of another user's principal URL, could exploit improper authorization controls to gain full access to that user's calendar. This allows the attacker to view and modify the victim's calendar, leading to unauthorized...
CVE-2026-0087
In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to hijack an arbitrary app link due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
CVE-2026-0087
CVE-2026-0087 : The connected sources identify a logic error in Android’s DomainVerificationService.java (approvalLevelForDomainInternal) that could allow hijacking an arbitrary app link, enabling local privilege escalation without user interaction. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:...
CVE-2026-0087
In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to hijack an arbitrary app link due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
CVE-2026-0087
In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to hijack an arbitrary app link due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
CVE-2026-10289
creationtimestamp| type| source ---|---|--- 2026-06-01 21:14:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnayqj54cb2n...
CVE-2026-45545
creationtimestamp| type| source ---|---|--- 2026-06-01 21:04:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnay6m25l42w 2026-06-05 03:08:11+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mnj5uepyuj2f...
CVE-2026-45727
creationtimestamp| type| source ---|---|--- 2026-06-01 20:59:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnaxvnkvb32z...
CVE-2026-45729
creationtimestamp| type| source ---|---|--- 2026-06-01 20:44:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnax3vobbu2z 2026-07-22 17:00:04+00:00| seen| Telegram/tTAffE3ecNhvRTBphw7K5bpufit0HCKjFX6WbbNQmiqRs00 2026-07-23 00:00:10+00:00| published-proof-of-concept|...
CVE-2026-10286
creationtimestamp| type| source ---|---|--- 2026-06-01 20:39:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnawsjmsdr26...
CVE-2026-8206
creationtimestamp| type| source ---|---|--- 2026-06-01 20:00:04+00:00| seen| https://t.me/GithubRedTeam/86883 2026-06-01 23:00:14+00:00| seen| Telegram/WmCsGmCxw3llm8l2PpPL4TbSd7NmUffJbXR2OZgq87qhTE 2026-06-02 04:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mnbr4mqu6h2j...
CVE-2026-9319
creationtimestamp| type| source ---|---|--- 2026-06-01 19:41:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnatk6z5aa2k 2026-06-12 12:55:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mo3ry7mosb27 2026-06-16 19:25:04+00:00| seen|...
CVE-2026-8644
creationtimestamp| type| source ---|---|--- 2026-06-01 19:35:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnat7wh7co2w 2026-06-04 18:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mni7os6qr22z 2026-06-04 20:25:05+00:00| seen|...
CVE-2026-45132
creationtimestamp| type| source ---|---|--- 2026-06-01 19:22:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnasjc2rg427 2026-07-23 23:00:03+00:00| seen| Telegram/3IdoSx-1lpc2iHoFvsp2wYXyVxuQva2z1gsDIpvcW15f6s 2026-07-24 00:00:07+00:00| seen|...