65767 matches found
CVE-2026-49276
Kirby is an open-source content management system. Prior to 4.9.4 and 5.4.4, Kirby sites using the writer field in any blueprint allowed a scripting link to be included as the target of a link or email link in writer mark components, making the target clickable by the user who entered it and...
CVE-2026-61343
creationtimestamp| type| source ---|---|--- 2026-07-09 19:09:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqadjf7v5v2i 2026-07-13 22:00:05+00:00| seen| https://t.me/GithubRedTeam/92727 2026-07-14 00:00:09+00:00| seen| https://t.me/GithubRedTeam/92727 2026-07-15 00:00:36+00:00|...
CVE-2026-0281
An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web interface to obtain web session tokens. This requires a legitimate user to first click on a malicious link provided by the attacker. The...
CVE-2026-0281 PAN-OS: Information Disclosure Vulnerability in Management Web Interface
An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web interface to obtain web session tokens. This requires a legitimate user to first click on a malicious link provided by the attacker. The...
CVE-2026-0281
CVE-2026-0281 describes an information-disclosure vulnerability in Palo Alto Networks PAN-OS. An unauthenticated attacker with network access to the management web interface can obtain web session tokens, but exploitation requires a legitimate user to click a malicious link. Affected products inc...
CVE-2026-59224
creationtimestamp| type| source ---|---|--- 2026-07-09 18:50:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqacgp7ize2g...
CVE-2026-49276
Kirby CMS contains a self-XSS vulnerability (CVE-2026-49276) in the writer field used by any blueprint. In affected releases, a scripting link could be placed as the target of a link or email link in writer mark components, allowing the attacker to trigger JavaScript execution in the authenticate...
CVE-2026-59827
creationtimestamp| type| source ---|---|--- 2026-07-09 18:26:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqab2wousj2w 2026-07-09 19:14:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqadsdolzn2x 2026-07-13 18:31:05+00:00| seen|...
CVE-2026-42015
creationtimestamp| type| source ---|---|--- 2026-07-09 17:42:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqa6nqlhtv2i...
CVE-2026-56774
creationtimestamp| type| source ---|---|--- 2026-07-09 16:50:09+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mqa3pfiovd2y...
PYSEC-2026-3078 Open Redirect in Apache Superset
Apache Superset prior to 1.1.0 allowed for the creation of an external URL that could be malicious. By not checking user input for open redirects the URL shortener functionality would allow for a malicious user to create a short URL for a dashboard that could convince the user to click the link...
CVE-2026-54798
creationtimestamp| type| source ---|---|--- 2026-07-09 16:47:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqa3kptfir27 2026-07-10 14:00:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqccogp5db24 2026-07-16 16:15:03+00:00| seen|...
CVE-2026-54800
creationtimestamp| type| source ---|---|--- 2026-07-09 16:23:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqa277wdxi2q 2026-07-09 23:58:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116892728676419193 2026-07-10 14:00:13+00:00| seen|...
CVE-2026-11404
creationtimestamp| type| source ---|---|--- 2026-07-09 16:19:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7zyixrry2e 2026-07-11 00:29:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdftvzixw2e...
CVE-2026-12116
creationtimestamp| type| source ---|---|--- 2026-07-09 16:06:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq7zamcuur2d...
CVE-2026-15188
creationtimestamp| type| source ---|---|--- 2026-07-09 16:05:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7z7nlg2z2i...
CVE-2026-15189
creationtimestamp| type| source ---|---|--- 2026-07-09 15:57:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7yroxee32t...
GHSA-C43V-4CR8-6MVP
creationtimestamp| type| source ---|---|--- 2026-07-09 15:42:12+00:00| seen| https://gist.github.com/alon710/ffb181b33bedea772189a8193fac5697...
CVE-2026-56292
creationtimestamp| type| source ---|---|--- 2026-07-09 14:37:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7ucjr7o52t 2026-07-09 17:34:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqa65xtg2r2z 2026-07-11 03:07:06+00:00| seen|...