41575 matches found
CVE-2026-8242
creationtimestamp| type| source ---|---|--- 2026-05-10 10:40:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlil2ksay22q...
Malicious code in post-purchase-bundler (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a33aa69ef958573a786f3db208d8ee335829e14009d1fdafecbc842ed493b8b The package post-purchase-bundler was found to contain malicious code. Source: ossf-package-analysis...
MAL-2026-3412 Malicious code in post-purchase-bundler (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a33aa69ef958573a786f3db208d8ee335829e14009d1fdafecbc842ed493b8b The package post-purchase-bundler was found to contain malicious code. Source: ossf-package-analysis...
CVE-2026-8231
creationtimestamp| type| source ---|---|--- 2026-05-10 08:17:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlid3h32jz2h...
CVE-2026-8219
creationtimestamp| type| source ---|---|--- 2026-05-10 04:40:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlhwy6cxux2e...
CVE-2022-50966
creationtimestamp| type| source ---|---|--- 2026-05-10 04:16:34+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2022-50966 2026-05-10 15:44:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlj43gyge42q...
CVE-2022-50961
creationtimestamp| type| source ---|---|--- 2026-05-10 04:16:33+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2022-50961 2026-05-10 15:29:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlj3alrvpk2n...
CVE-2026-8212
creationtimestamp| type| source ---|---|--- 2026-05-10 01:24:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlhlzs5v7u2n...
CVE-2026-45181
creationtimestamp| type| source ---|---|--- 2026-05-10 01:19:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlhlqtpypx2t...
WordPress plugin Netroics Blog Posts Grid 跨站脚本漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
CyberPanel 后置链接漏洞
CyberPanel is a virtual hosting control panel developed by Usman Nasir, which includes DNS and email servers. Version 2.1 of CyberPanel has a post-backlink vulnerability. This vulnerability stems from an issue with the filemanager controller endpoint, where command execution is possible. This cou...
SUSE SLES15 Security Update : python-Django (SUSE-SU-2026:1740-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1740-1 advisory. This update for python-Django fixes the following issues - CVE-2026-3902: headers spoofing by exploiting an ambiguous mapping of two header...
WordPress plugin Jetpack 跨站脚本漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...
PT-2026-39514
Evolution CMS 3.1.6 contains a remote code execution vulnerability that allows authenticated users with module creation permissions to execute arbitrary system commands by injecting PHP code into module parameters. Attackers can send POST requests to /manager/index.php with malicious PHP code in...
PT-2026-39483
Name of the Vulnerable Software and Affected Versions Jetpack version 9.1 Description A reflected cross-site scripting issue allows unauthenticated attackers to inject malicious scripts into victim browsers. This is achieved by manipulating the post id parameter within the "grunion-form-view.php"...
PT-2026-39506
Balbooa Joomla Forms Builder 2.0.6 contains an unauthenticated SQL injection vulnerability in the form submission handler that allows remote attackers to execute arbitrary SQL queries. Attackers can send POST requests to the com baforms component with malicious JSON payloads in the 'id' field...
PT-2026-39524
Advanced Guestbook 2.4.4 contains a persistent cross-site scripting vulnerability in the smilies administration interface that allows authenticated attackers to inject malicious scripts by manipulating the s emotion parameter. Attackers can submit POST requests to admin.php with JavaScript code i...
WordPress plugin Ultimate Product Catalog 跨站脚本漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
PT-2026-39503
WordPress Plugin WP Symposium Pro 2021.10 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by exploiting insufficient sanitization of the forum name parameter. Attackers can submit POST requests to the admin setup page with...