49829 matches found
CVE-2026-83042
creationtimestamp| type| source ---|---|--- 2026-09-15 22:14:42+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlnkdqahp2g 2026-09-16 02:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvm3sxp3u42y 2026-09-23 06:37:08+00:00| seen|...
CVE-2026-83037
creationtimestamp| type| source ---|---|--- 2026-09-15 22:14:09+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlnjcph452j 2026-09-16 00:00:20+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvltgyvyop25 2026-09-23 09:48:49+00:00| seen|...
CVE-2026-83031
creationtimestamp| type| source ---|---|--- 2026-09-15 22:13:42+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlnikmkba2b 2026-09-15 23:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlsuuari52t 2026-09-23 09:49:01+00:00| seen|...
CVE-2026-82998
creationtimestamp| type| source ---|---|--- 2026-09-15 22:12:26+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlngbs75h2t 2026-09-15 23:00:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlq3mj4mn25 2026-09-23 09:50:06+00:00| seen|...
CVE-2026-82997
creationtimestamp| type| source ---|---|--- 2026-09-15 22:12:17+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlnfz37552j 2026-09-15 23:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlq3izjdq2y 2026-09-23 09:50:08+00:00| seen|...
CVE-2026-92000
creationtimestamp| type| source ---|---|--- 2026-09-15 22:00:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvlmqp54zu2m...
CVE-2026-54544
Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.16, two API endpoints that trigger outbound HTTP requests are missing the @loginrequired decorator. An unauthenticated attacker can call POST /api/test-discord-webhook or POST /api/test-webhook and cause the Fireshare...
CVE-2026-87287
creationtimestamp| type| source ---|---|--- 2026-09-15 21:03:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvljkoglcz2z...
CVE-2026-87286
creationtimestamp| type| source ---|---|--- 2026-09-15 21:01:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvljh2lpuk2b...
CVE-2026-88975
creationtimestamp| type| source ---|---|--- 2026-09-15 21:01:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvljgt7w5m2s...
CVE-2026-81925
Concrete CMS before 9.5.3 improperly neutralized a user-supplied custom date format when rendering conversation messages, resulting in reflected cross-site scripting. An attacker could execute arbitrary JavaScript in the browser of a user who was tricked into submitting a crafted POST request to...
CVE-2026-19885
creationtimestamp| type| source ---|---|--- 2026-09-15 20:13:27+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3mvlgrj64du2g...
CVE-2026-19781
creationtimestamp| type| source ---|---|--- 2026-09-15 20:13:25+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3mvlgrhiprk2z...
EUVD-2026-79939
Concrete CMS before 9.5.3 improperly neutralized a user-supplied custom date format when rendering conversation messages, resulting in reflected cross-site scripting. An attacker could execute arbitrary JavaScript in the browser of a user who was tricked into submitting a crafted POST request to...
CVE-2026-89040 Tencent Mass Service Engine in Cluster (MSEC) path traversal
Tencent Mass Service Engine in Cluster MSEC allows a remote, unauthenticated attacker to send a crafted POST request including ../ and gain root access on the target device. An attacker who uploads a webshell can execute arbitrary code as root...
EUVD-2026-79672
Tencent Mass Service Engine in Cluster MSEC allows a remote, unauthenticated attacker to send a crafted POST request including ../ and gain root access on the target device. An attacker who uploads a webshell can execute arbitrary code as root...
CVE-2026-89040
Tencent Mass Service Engine in Cluster (MSEC) is affected by a path traversal vulnerability that allows a remote, unauthenticated attacker to send a crafted POST request containing ../, gaining root access on the target device. An attacker who uploads a webshell can then execute arbitrary code as...
CVE-2026-89040 Tencent Mass Service Engine in Cluster (MSEC) path traversal
Tencent Mass Service Engine in Cluster MSEC allows a remote, unauthenticated attacker to send a crafted POST request including ../ and gain root access on the target device. An attacker who uploads a webshell can execute arbitrary code as root...
CVE-2026-81924
Concrete CMS before 9.5.3 is vulnerable to Cross-Site Request Forgery CSRF in the theme page-template activation feature. The Dashboard theme Inspect controller's activatefiles action created PageTemplate records from attacker-supplied pageTemplates values without validating an anti-CSRF token.A...