ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input

A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting XSS by providing untrusted input to the Address6 constructor. When an application renders the output of...

CVE-2026-46495

creationtimestamp| type| source ---|---|--- 2026-07-20 13:07:29+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mr3efcczps2d 2026-09-15 14:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvktlkbktw2t 2026-09-15 16:08:29+00:00| seen|...

CVE-2026-64620

creationtimestamp| type| source ---|---|--- 2026-07-20 12:26:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr3c3dec742e 2026-07-20 13:50:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3gs3ubu52g 2026-07-21 04:02:04+00:00| seen|...

CVE-2026-16254

creationtimestamp| type| source ---|---|--- 2026-07-20 12:00:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3anwj7rv2q...

CVE-2026-53381

creationtimestamp| type| source ---|---|--- 2026-07-20 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mr37ibrdp72j 2026-08-06 04:46:10+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806 2026-09-15...

CVE-2026-8825

creationtimestamp| type| source ---|---|--- 2026-07-20 08:50:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr2vz4xvbz2q...

CVE-2026-10081

creationtimestamp| type| source ---|---|--- 2026-07-20 08:40:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr2vha2w3g23...

CVE-2026-12723

creationtimestamp| type| source ---|---|--- 2026-07-20 08:30:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr2uvax2f52o...

CVE-2026-11868

creationtimestamp| type| source ---|---|--- 2026-07-20 08:22:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr2uguacm52g...

CVE-2026-12973

creationtimestamp| type| source ---|---|--- 2026-07-20 08:15:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr2u3iwzul24...

CVE-2026-2445

CVE-2026-2445 involves a reflected cross-site scripting (XSS) flaw in multiple WSO2 products where user-supplied input in a URL parameter is rendered without proper sanitization/encoding. The underlying issue is unsafe handling of URL parameters that can inject malicious JavaScript, enabling brow...

CVE-2026-16235

creationtimestamp| type| source ---|---|--- 2026-07-20 08:05:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr2tk3latx2q 2026-07-20 14:28:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr3ivjataz2i 2026-07-20 17:58:06+00:00| seen|...

CVE-2026-12724

creationtimestamp| type| source ---|---|--- 2026-07-20 07:55:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr2sxglekj2j...

CVE-2026-9833

The Tag Groups is the Advanced Way to Display Your Taxonomy Terms WordPress plugin before 2.2.0 does not properly escape one of its AJAX parameters before reflecting it in the response body served with an HTML content type, allowing unauthenticated attackers to execute arbitrary JavaScript in the...

dotnet: .NET: Local tampering via improper link resolution

A flaw was found in .NET. This vulnerability, stemming from improper link resolution before file access, allows an authorized local attacker to perform tampering. This could lead to unauthorized modification of data or system files...

dotnet: .NET: Local tampering via improper link resolution

A flaw was found in .NET. This vulnerability, stemming from improper link resolution before file access, allows an authorized local attacker to perform tampering. This could lead to unauthorized modification of data or system files...

CVE-2026-9833

The Tag Groups is the Advanced Way to Display Your Taxonomy Terms WordPress plugin before 2.2.0 does not properly escape one of its AJAX parameters before reflecting it in the response body served with an HTML content type, allowing unauthenticated attackers to execute arbitrary JavaScript in the...

CVE-2026-12970

The LearnPress WordPress plugin before 4.4.1 does not escape a search parameter before reflecting it into an HTML attribute, leading to Reflected Cross-Site Scripting that executes in the browser of a logged-in instructor or administrator who is tricked into opening a crafted link...

EUVD-2026-45885

The LearnPress WordPress plugin before 4.4.1 does not escape a search parameter before reflecting it into an HTML attribute, leading to Reflected Cross-Site Scripting that executes in the browser of a logged-in instructor or administrator who is tricked into opening a crafted link...

dotnet: .NET: Local tampering via improper link resolution

A flaw was found in .NET. This vulnerability, stemming from improper link resolution before file access, allows an authorized local attacker to perform tampering. This could lead to unauthorized modification of data or system files...