40379 matches found
CVE-2023-33190
creationtimestamp| type| source ---|---|--- 2026-06-20 09:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mopknjoa4c25...
CVE-2007-1766
creationtimestamp| type| source ---|---|--- 2026-06-20 03:37:05+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3moowjs4ax42g...
CVE-2026-9843
creationtimestamp| type| source ---|---|--- 2026-06-20 02:43:07+00:00| seen| https://bsky.app/profile/suriq.io/post/3mootjayro42t 2026-06-20 05:44:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mop5nox22k23 2026-06-20 09:00:30+00:00| seen|...
CVE-2026-56213
creationtimestamp| type| source ---|---|--- 2026-06-20 02:14:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moorvvnelh2e...
CVE-2026-53532
creationtimestamp| type| source ---|---|--- 2026-06-20 02:01:08+00:00| seen| https://bsky.app/profile/slackers.it/post/3moor6754ks2n...
CVE-2026-55371
creationtimestamp| type| source ---|---|--- 2026-06-20 02:01:07+00:00| seen| https://bsky.app/profile/slackers.it/post/3moor6754ks2n...
CVE-2007-3488
creationtimestamp| type| source ---|---|--- 2026-06-20 00:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mooksdek3f2n...
PT-2026-51140
Name of the Vulnerable Software and Affected Versions WordPress Time Capsule Plugin version 1.21.16 Description An authentication bypass allows unauthenticated attackers to gain administrative access by sending a crafted POST request containing the IWP JSON PREFIX header. This flaw enables the...
CVE-2008-2474
creationtimestamp| type| source ---|---|--- 2026-06-19 23:37:05+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mooj4nccpj24...
CVE-2026-42895
creationtimestamp| type| source ---|---|--- 2026-06-19 22:41:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moofzqxwop2e 2026-06-26 22:05:15+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mp7xauccim2o...
CVE-2026-48089
creationtimestamp| type| source ---|---|--- 2026-06-19 22:04:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moodxmm5ga2a...
Cross-site Scripting (XSS)
Overview appium-mcp is an Intelligent MCP server providing AI assistants with powerful tools and resources for Appium mobile automation Affected versions of this package are vulnerable to Cross-site Scripting XSS via the createLocatorGeneratorUI function. An attacker can execute arbitrary...
GHSA-G5QX-H5F3-MP2F TinaCMS: Cross-origin postMessage handlers and rich-text URL-sanitization bypass enable stored XSS and session takeover
TinaCMS registers window message listeners — the useTina overlay handler, the OAuth authentication popup handler, and the admin↔preview iframe GraphQL reducer — that act on event.data without verifying event.origin or event.source, and post messages using non-specific target origins. A page the...
Improper Verification of Source of a Communication Channel
Overview Affected versions of this package are vulnerable to Improper Verification of Source of a Communication Channel via improper validation of cross-origin messages in the window message listeners. An attacker can hijack authenticated editing sessions by sending crafted postMessage events fro...
TinaCMS: Cross-origin postMessage handlers and rich-text URL-sanitization bypass enable stored XSS and session takeover
TinaCMS registers window message listeners — the useTina overlay handler, the OAuth authentication popup handler, and the admin↔preview iframe GraphQL reducer — that act on event.data without verifying event.origin or event.source, and post messages using non-specific target origins. A page the...
CVE-2008-6557
creationtimestamp| type| source ---|---|--- 2026-06-19 20:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3moo72rsqmo2a...
CVE-2019-25755
creationtimestamp| type| source ---|---|--- 2026-06-19 19:59:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moo4xgslle2g...
CVE-2019-25754
creationtimestamp| type| source ---|---|--- 2026-06-19 19:49:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moo4fipdtx2i...