74731 matches found
Cross-site Scripting (XSS)
Overview kiwitcms is a Test Case Management System Affected versions of this package are vulnerable to Cross-site Scripting XSS via the extralink field in TestPlan and TestCase components. An attacker can inject and execute arbitrary JavaScript code by submitting specially crafted input to these...
Kiwi TCMS vulnerable to stored XSS via JavaScript: URI in extra_link field (TestPlan & TestCase)
Summary In Kiwi TCMS the fields TestCase.extralink and TestPlan.extralink were meant to represent URLs to external resources however in versions prior to 16.1 user input was not being sanitized and values were rendered verbatim which represents an opportunity for cross-site scripting exploitation...
GHSA-287W-MXQ6-X2CP
creationtimestamp| type| source ---|---|--- 2026-07-06 21:42:10+00:00| seen| https://gist.github.com/alon710/42394c2aa3975303824ce1e33bac787e...
CVE-2025-53831
creationtimestamp| type| source ---|---|--- 2026-07-06 21:22:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyzjfmjlm2i...
CVE-2026-14898
creationtimestamp| type| source ---|---|--- 2026-07-06 20:51:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyxsv3wbl2n...
CVE-2026-54060
creationtimestamp| type| source ---|---|--- 2026-07-06 20:41:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyxay7yvu24 2026-07-07 05:11:05+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mpztpioixl27 2026-07-20 22:37:44+00:00| published-proof-of-concept|...
Directory Traversal
Overview decompress is a package that can be used for extracting archives. Affected versions of this package are vulnerable to Directory Traversal and link following during archive extraction, where symlink and hardlink entries are created without checking their targets and the directory...
Directory Traversal
Overview @xhmikosr/decompress is an Extracting archives made easy Affected versions of this package are vulnerable to Directory Traversal and link following during archive extraction, where symlink and hardlink entries are created without checking their targets and the directory containment check...
Directory Traversal
Overview org.webjars.npm:decompress is a package that can be used for extracting archives. Affected versions of this package are vulnerable to Directory Traversal and link following during archive extraction, where symlink and hardlink entries are created without checking their targets and the...
CVE-2026-55379
creationtimestamp| type| source ---|---|--- 2026-07-06 20:26:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpywg4twbd2z 2026-07-20 22:37:42+00:00| published-proof-of-concept| https://github.com/python-pillow/Pillow/security/advisories/GHSA-45hq-cxwh-f6vc...
CVE-2026-9182
creationtimestamp| type| source ---|---|--- 2026-07-06 20:18:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyvxqfq4f2z 2026-07-08 03:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq47nlkutf2h...
EUVD-2026-24981
rm: --preserve-root bypassed via a symlink to / string check instead of dev/inode...
CVE-2026-35371
creationtimestamp| type| source ---|---|--- 2026-07-06 20:12:01+00:00| seen| https://gist.github.com/alon710/f5f0c292471d2cc05167d6fa94d49a4e...
CVE-2026-44362
creationtimestamp| type| source ---|---|--- 2026-07-06 20:09:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyvhisihn24...
CVE-2026-53763
creationtimestamp| type| source ---|---|--- 2026-07-06 20:07:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyvcz6rwr2v...
CVE-2026-55380
creationtimestamp| type| source ---|---|--- 2026-07-06 20:04:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyv6ureav2v 2026-07-20 22:37:39+00:00| published-proof-of-concept| https://github.com/python-pillow/Pillow/security/advisories/GHSA-phj9-mv4w-65pm...
CVE-2026-58403
creationtimestamp| type| source ---|---|--- 2026-07-06 19:58:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyuu3futf27...
