CVE-2026-24191

creationtimestamp| type| source ---|---|--- 2026-05-26 19:06:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrotgewhw2i...

CVE-2025-33221

creationtimestamp| type| source ---|---|--- 2026-05-26 19:01:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrojvcp4x2h...

CVE-2026-8854

creationtimestamp| type| source ---|---|--- 2026-05-26 19:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmroi3y73g2e...

CVE-2026-24194

creationtimestamp| type| source ---|---|--- 2026-05-26 19:00:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmroh2mqor2i...

CVE-2026-24190

creationtimestamp| type| source ---|---|--- 2026-05-26 18:58:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmroeegm7z2n...

Typebot.io has stored XSS via `javascript`: URI in text bubble links — bot author executes JS on visitors' browsers

Summary The Typebot viewer packages/embeds/js renders anchor tags from rich text bubble content without filtering the javascript: URI scheme. A bot author can set a link URL to javascript:PAYLOAD, which executes in the visitor's browser context when clicked. Since the viewer is typically embedded...

WordPress Google+ Link Name plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by MAJidox in WordPress Plugin Google+ Link Name versions = 1.0...

CVE-2026-48902

CVE-2026-48902 affects Joomla! Core. The password/username reset features generate plain http links for https connections when Force SSL is not explicitly enabled, enabling possible credential exposure via downgraded transport. The issue is documented across multiple feeds (e.g., JOOMLA-1050) and...

CVE-2026-47715

Bugsink is a self-hosted error tracking tool. Prior to 2.2.0, Bugsink issue event pages accept a direct event identifier from the URL and, in affected versions, look up that event without also requiring it to belong to the issue in the URL. This is a project-boundary authorization issue: a...

CVE-2026-9544

creationtimestamp| type| source ---|---|--- 2026-05-26 15:57:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrebfzcfx2r...

CVE-2026-8633

creationtimestamp| type| source ---|---|--- 2026-05-26 15:40:06+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3mmrdbmewjs2b 2026-05-26 21:05:06+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3mmrvgqw2dx26 2026-05-27 20:07:06+00:00| seen|...

CVE-2026-48134

creationtimestamp| type| source ---|---|--- 2026-05-26 15:15:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrbvz3xfd2q 2026-05-27 14:35:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4yad4r2m...

CVE-2026-48131

creationtimestamp| type| source ---|---|--- 2026-05-26 15:04:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrbclx5mf2r 2026-05-27 14:35:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4yad4r2m 2026-06-01 16:03:46+00:00| seen|...

CVE-2026-41917

creationtimestamp| type| source ---|---|--- 2026-05-26 15:03:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrb7ezuu62i...

CVE-2026-43936

Summary: CVE-2026-43936 affects the e107 content management system (CMS). Before version 2.3.4, an SSRF flaw in the remote file fetcher can be triggered via the Image/File URL field in Media Manager’s From a remote location, allowing access to local environment resources. The issue is fixed in 2....

CVE-2026-3012

creationtimestamp| type| source ---|---|--- 2026-05-26 14:33:00+00:00| seen| https://vulnerability.circl.lu/bundle/ef598036-eda2-4311-807e-ebbdfb04a51d 2026-05-27 02:01:27+00:00| seen| https://bsky.app/profile/slackers.it/post/3mmsfyjytqj2i 2026-05-27 02:01:30+00:00| seen|...

CVE-2026-4408

creationtimestamp| type| source ---|---|--- 2026-05-26 14:33:00+00:00| seen| https://vulnerability.circl.lu/bundle/ef598036-eda2-4311-807e-ebbdfb04a51d 2026-05-27 02:01:28+00:00| seen| https://bsky.app/profile/slackers.it/post/3mmsfyl27rh2e 2026-05-27 02:01:30+00:00| seen|...

CVE-2026-46644

creationtimestamp| type| source ---|---|--- 2026-05-26 14:09:55+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmr6aefu2q2m...

CVE-2026-45704

creationtimestamp| type| source ---|---|--- 2026-05-26 14:01:06+00:00| published-proof-of-concept| https://github.com/pimcore/pimcore/security/advisories/GHSA-jwcc-gv4m-93x6...

CVE-2026-41048

creationtimestamp| type| source ---|---|--- 2026-05-26 12:30:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmqyowpr7z2z...