41903 matches found
CVE-2026-59828
Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, post revisions that should be hidden from regular users could be leaked through visible diffs on adjacent revisions serialized by PostRevisionSerializer. This issue is fixed in versions 2026.6.0,...
CVE-2026-58143
Cotonti Siena 0.9.26 and earlier are affected by a cross-site request forgery via the admin.php config update endpoint. The vulnerability lets an unauthenticated attacker trick a logged-in administrator into submitting a forged POST request, bypassing CSRF validation. Attackers can disable the PF...
CVE-2026-54004
creationtimestamp| type| source ---|---|--- 2026-07-09 21:14:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqakhwvc2726...
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization in the erasespamedcomments process. An attacker can permanently delete arbitrary wiki pages, including critical or administrative pages, by sending crafted POST requests containing a suppr array with targeted page...
CVE-2026-55590
creationtimestamp| type| source ---|---|--- 2026-07-09 20:49:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqaj36nun627 2026-07-13 23:27:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqktqzssjo27...
CVE-2026-59148
creationtimestamp| type| source ---|---|--- 2026-07-09 20:34:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqaibfx7pc24 2026-09-12 00:32:03+00:00| seen| https://gist.github.com/alon710/12e5af59440fe17bf499cbab29b7b498 2026-09-12 00:35:05+00:00| published-proof-of-concept|...
CVE-2026-58198
creationtimestamp| type| source ---|---|--- 2026-07-09 20:16:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqaha72ila2w...
CVE-2026-50188
creationtimestamp| type| source ---|---|--- 2026-07-09 20:01:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqagfdjqyh2q...
CVE-2026-59726
creationtimestamp| type| source ---|---|--- 2026-07-09 18:26:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqab2vcb5g2b 2026-07-09 19:19:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqae3c4udu2x 2026-07-29 13:13:55+00:00| seen|...
CVE-2026-11875
creationtimestamp| type| source ---|---|--- 2026-07-09 17:33:02+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqa642jpjz2e...
MAL-2026-10086 Malicious code in dl-pp-latm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e21f1adb71c41838848c4d4292830a9738895d32a5b0f1f098e1efdadb233716 Package [email protected] registers both preinstall and postinstall lifecycle hooks that run index.js, which collects installer machine identifiers —...
CVE-2026-54801
creationtimestamp| type| source ---|---|--- 2026-07-09 16:52:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqa3tocizy2x 2026-07-10 14:00:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqccogp5db24 2026-07-14 12:45:03+00:00| seen|...
CVE-2026-54799
creationtimestamp| type| source ---|---|--- 2026-07-09 16:42:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqa3brethk24 2026-07-10 14:00:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqccogp5db24 2026-07-16 16:15:05+00:00| seen|...
CVE-2026-59207
creationtimestamp| type| source ---|---|--- 2026-07-09 16:10:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7zibfybn25...
CVE-2026-14261
creationtimestamp| type| source ---|---|--- 2026-07-09 16:08:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq7ze5kj422q...
CVE-2026-61474
creationtimestamp| type| source ---|---|--- 2026-07-09 16:07:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7zdryo4a2g...
CVE-2026-52200
creationtimestamp| type| source ---|---|--- 2026-07-09 16:06:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq7zakvwqq2v...
CVE-2026-59208
creationtimestamp| type| source ---|---|--- 2026-07-09 16:03:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7z3sn6kq2i 2026-07-15 15:22:07+00:00| seen| https://bsky.app/profile/hn100.bsky.social/post/3mqozlgli3q2t 2026-07-15 15:27:26+00:00| seen|...
Malicious code in es6-codify (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7ae2aa828c8ed2c3ec71480536fd07d9c19f3c698c3b095eafb41206ff3a75f The package advertises itself as a small ES6 string/array/object utility library, but both entrypoints dist/index.cjs and the ESM build execute a...