39384 matches found
CVE-2026-66035
creationtimestamp| type| source ---|---|--- 2026-07-24 20:01:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrg5fadoc62q 2026-07-26 06:44:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrjrrbwwoz22...
CVE-2026-17107
creationtimestamp| type| source ---|---|--- 2026-07-24 20:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrg5dzv3fn2u...
CVE-2026-54342
creationtimestamp| type| source ---|---|--- 2026-07-24 20:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrg5dmmkie22...
CVE-2024-45116
creationtimestamp| type| source ---|---|--- 2026-07-24 19:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrg2e3mwk32s...
CVE-2024-21252
creationtimestamp| type| source ---|---|--- 2026-07-24 18:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrfwys3igb22...
CVE-2024-21250
creationtimestamp| type| source ---|---|--- 2026-07-24 17:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrfvd5swm62m...
CVE-2026-65707
Likeshop through 3.0.5 contains an authenticated SQL injection vulnerability that allows admin-level users to extract arbitrary database contents by submitting unsanitized POST parameters to the adjustAccount endpoint. The adjustAccount method in UserLogic.php concatenates the money, integral,...
CVE-2026-66027
creationtimestamp| type| source ---|---|--- 2026-07-24 16:59:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrftaqlx4w2w...
CVE-2026-56163
creationtimestamp| type| source ---|---|--- 2026-07-24 15:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrfpdqsahf2i 2026-07-24 22:01:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrge4cpvum2q 2026-07-25 04:30:24+00:00| seen|...
EUVD-2026-48612
lakeFS through 1.83.0, fixed in commit 71a45ee, contains an authentication bypass vulnerability in the /setupcommprefs endpoint that allows unauthenticated attackers to overwrite operator metadata including email, name, and company after setup completion. Attackers can POST to this endpoint to...
CVE-2026-12496
Loytec LINX firmware (LINX-A64, affected on 8.4.16 and earlier) contains an unauthenticated stored XSS in the OPC XML-DA server statistics. A crafted User-Agent header in a POST /da request can execute arbitrary JavaScript in an administrator’s browser, enabling session hijacking, credential thef...
EUVD-2026-48589
Stored Cross-Site Scripting CWE-79 in the OPC XML-DA server statistics in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows an unauthenticated remote attacker to execute arbitrary JavaScript in an administrator's browser session hijacking,...
CVE-2026-12496 Loytec LINX firmware: Unauthenticated stored XSS in OPC XML-DA server
Stored Cross-Site Scripting CWE-79 in the OPC XML-DA server statistics in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows an unauthenticated remote attacker to execute arbitrary JavaScript in an administrator's browser session hijacking,...
CVE-2026-12496
Stored Cross-Site Scripting CWE-79 in the OPC XML-DA server statistics in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows an unauthenticated remote attacker to execute arbitrary JavaScript in an administrator's browser session hijacking,...
CVE-2026-23302
creationtimestamp| type| source ---|---|--- 2026-07-24 13:25:31+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrfhbbzjc72d...
CVE-2026-53392
creationtimestamp| type| source ---|---|--- 2026-07-24 13:25:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrfhb3ikw42o...
CVE-2026-63815
creationtimestamp| type| source ---|---|--- 2026-07-24 13:25:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrfhb3ikw42o...
CVE-2026-45813
creationtimestamp| type| source ---|---|--- 2026-07-24 13:15:49+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrfgpm7jcl2g 2026-07-25 06:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrh6uz5ad72m...
CVE-2026-66144
creationtimestamp| type| source ---|---|--- 2026-07-24 13:08:05+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrfgc365h32s 2026-07-25 06:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrh6usosqu2w...
CVE-2026-61884
creationtimestamp| type| source ---|---|--- 2026-07-24 13:04:27+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrfg3mgxra2p 2026-07-24 22:22:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrgfap6ldt2v 2026-07-24 23:00:27+00:00| seen|...