76795 matches found
GHSA-934W-87QH-QR26 Nuxt: Reflected XSS in `<NuxtLink>` via unsanitised `javascript:` or `data:` URL
Summary did not validate the URL scheme of values bound to its to or href props before rendering them into the href attribute of the underlying element. When an application binds attacker-controlled input a query parameter, a CMS field, a user-supplied profile URL to or :href, the attacker can...
CVE-2026-12225
creationtimestamp| type| source ---|---|--- 2026-06-16 13:32:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mofvwytyu62f 2026-06-22 03:03:17+00:00| seen| https://bsky.app/profile/hacker.at.thenote.app/post/3motvk57rgk2h...
CVE-2026-10640
Summary: Zephyr’s IPv6 Neighbor Discovery send paths (ipv6_nbr.c) perform a use-after-free by reading iface from a freed net_pkt slab block when updating per-interface ICMP statistics, after the packet has been sent. This can corrupt iface-stats.icmp.sent or cause a crash/DoS if the slab memory i...
CVE-2026-50203
creationtimestamp| type| source ---|---|--- 2026-06-16 13:27:11+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mofvnbvfs42g 2026-06-17 06:32:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mohoxaa3322z 2026-06-18 14:07:08+00:00| seen|...
CVE-2026-10852
creationtimestamp| type| source ---|---|--- 2026-06-16 12:50:05+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3moftkwzfkl2p...
CVE-2026-53900 Cookie injection was possible when opening a PDF link
Firefox for iOS preserved cookies set on the initial PDF request across cross-origin HTTP redirects in TemporaryDocument, allowing a malicious site to inject arbitrary cookies into requests to an unrelated target domain. This vulnerability was fixed in Firefox for iOS 152.0...
CVE-2026-39490
creationtimestamp| type| source ---|---|--- 2026-06-16 11:01:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mofnj7cep524...
Fake Microsoft Alerts Used to Deploy North Korean NarwhalRAT Malware
The North Korean state-sponsored hacking group known as ScarCruft aka APT37 has been observed using spear-phishing messages impersonating Microsoft Account security notifications to deliver a new malware called NarwhalRAT. "The attack email contained a message impersonating an MS account security...
Exploit for UNIX Symbolic Link Following in Litespeedtech Litespeed_Cpanel_Plugin
cve-id ⚡ Simple Usage Use this project only in safe and...
CVE-2001-0731
creationtimestamp| type| source ---|---|--- 2026-06-16 06:00:26+00:00| seen| https://gist.github.com/magajay4life-pixel/f7260a84b8e6d9a00baa0febf00bfd83...
CVE-2026-53821
creationtimestamp| type| source ---|---|--- 2026-06-16 05:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3moezp3vgcp2a...
CVE-2026-0647
creationtimestamp| type| source ---|---|--- 2026-06-16 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-167-05 2026-06-16 16:12:33+00:00| seen| https://bsky.app/profile/boredchilada.bsky.social/post/3mog6uxnajr2d 2026-06-16 17:31:41+00:00| seen|...
CVE-2026-53831
creationtimestamp| type| source ---|---|--- 2026-06-16 02:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3moepnadglh2s...
GHSA-MF5C-HW34-4HPP
creationtimestamp| type| source ---|---|--- 2026-06-16 01:24:07+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3moenadkbis2e...
CVE-2026-53430
creationtimestamp| type| source ---|---|--- 2026-06-16 00:38:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moekog4et52f 2026-08-25 20:35:23+00:00| published-proof-of-concept| https://github.com/elixir-grpc/grpc/security/advisories/GHSA-6ccx-9c9f-327w 2026-08-26 08:31:40+00:00|...
Malicious Package
Overview janus-flow is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
PT-2026-50077
Name of the Vulnerable Software and Affected Versions Adobe Acrobat PDF Extension Chrome versions prior to 26.5.2.3 Description A UXSS-class cross-origin data disclosure issue exists where an attacker can gain access to the victim's session data. UXSS Universal Cross-Site Scripting is a type of...
CVE-2026-48777: Improper Limitation of a Pathname to a Restricted Directory
FileBrowser Quantum is a free, self-hosted, web-based file manager. Versions prior to 1.3.2-stable, 1.4.0-beta and 1.4.1-beta are vulnerable to Path Traversal through the publicPatchHandler in backend/http/public.go which joins user-controlled fromPath and toPath body fields with the trusted...
Malicious Package
Overview ect-839201 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...