66357 matches found
Comprehensive List of User Deception Techniques in Emails
Email remains a central communication medium, yet its long-standing design and interface conventions continue to enable deceptive attacks. This research note presents a structured list of 42 email-based deception techniques, documented with 64 concrete example implementations, organized around th...
WeGIA 输入验证错误漏洞
WeGIA is a network manager for welfare institutions developed by Nilson Lazarin as an individual project. Versions of WeGIA prior to 3.6.9 contained a vulnerability related to input validation errors. This vulnerability stemmed from the lack of URL validation or allowlist checks, which could lead...
CVE-2025-61166
The CVE-2025-61166 entry describes an open redirect in Ascertia SigningHub User v10.0 that lets an attacker redirect authenticated users to a malicious site via a crafted URL. Affected product: Ascertia SigningHub User 10.0 (component: open redirect functionality). Root cause: misimplementation o...
Ech0 代码问题漏洞
Ech0 is a self-hosted personal microblogging platform developed by L1nSn0w. Versions of Ech0 prior to 4.2.8 had code vulnerabilities. These vulnerabilities stemmed from the use of the GET /api/website/title route for link previews. This route lacked authentication and accepted URLs that could be...
The vulnerability of the Archive Utility component in macOS operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Archive Utility component in macOS operating systems is related to an incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
CVE-2019-25688
creationtimestamp| type| source ---|---|--- 2026-04-05 23:51:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mirwxh6rzj25...
CVE-2026-5603
creationtimestamp| type| source ---|---|--- 2026-04-05 23:24:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mirvgw46kw2n 2026-04-06 04:18:10+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3misfu7eyij2d...
CVE-2026-35679
creationtimestamp| type| source ---|---|--- 2026-04-05 23:22:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mirve3gxle2g...
CVE-2026-5579
creationtimestamp| type| source ---|---|--- 2026-04-05 19:29:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miricpadg623...
CVE-2026-5584
creationtimestamp| type| source ---|---|--- 2026-04-05 19:15:28+00:00| published-proof-of-concept| Telegram/XSUrmkvCssZQ5ta9ev5Bt6T-wcvTT0U3Un-0awIxLGZfqA 2026-04-05 19:40:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mirix2tc2a2t...
CVE-2026-5574
creationtimestamp| type| source ---|---|--- 2026-04-05 16:05:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mir4vbrh3322...
CVE-2026-5572
creationtimestamp| type| source ---|---|--- 2026-04-05 15:58:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mir4jwnjg62d...
CVE-2026-5569
creationtimestamp| type| source ---|---|--- 2026-04-05 15:16:27+00:00| published-proof-of-concept| Telegram/bba5KoRxZjw4aUqHfMWZuI7ux2762ZWKOY2q9V8MiGPKQ0 2026-04-05 16:23:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mir5vn4mlo2d...
CVE-2026-5560
creationtimestamp| type| source ---|---|--- 2026-04-05 12:51:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miqs3e4njf23...
CVE-2026-5564
creationtimestamp| type| source ---|---|--- 2026-04-05 12:10:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miqpsnbbsk2i 2026-04-05 13:15:30+00:00| published-proof-of-concept| Telegram/YoTTVTi9Zv4k-o9HEVMgDeJ9GD4yUztoWynI9KgYScEME...
CVE-2026-5563
creationtimestamp| type| source ---|---|--- 2026-04-05 12:05:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miqpjot2wm23...
CVE-2026-0738
The WP Shortcodes Plugin - Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sucarousel shortcode in all versions up to, and including, 7.4.8. This is due to insufficient input sanitization and output escaping in the 'suslidelink' attachment meta field...
CVE-2026-25134
creationtimestamp| type| source ---|---|--- 2026-04-05 10:31:08+00:00| seen| https://gist.github.com/siefr3dus/cdf0519ce5e65cfecb0437865149c810...