498 matches found
CVE-2025-9219
creationtimestamp| type| source ---|---|--- 2025-09-03 13:19:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxwpuxnzkv27...
PT-2025-39354
Name of the Vulnerable Software and Affected Versions Nx affected versions not specified Description A malicious code insertion occurred within the Nx build system package and associated plugins, distributed through the npm software registry as part of a supply-chain attack. The compromised...
CVE-2025-9444
creationtimestamp| type| source ---|---|--- 2025-08-26 05:08:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbqpj3wvq2p...
CVE-2025-57805 The Scratch Channel's Publish Articles POST Request Can Upload Articles Without Validation
The Scratch Channel is a news website. In versions 1 and 1.1, a POST request to the endpoint used to publish articles, can be used to post an article in any category with any date, regardless of who's logged in. This issue has been patched in version 1.2...
CVE-2025-57805
CVE-2025-57805 affects The Scratch Channel web platform. In versions 1 and 1.1, a POST to the article-publishing endpoint allows posting articles in any category with any date, regardless of login status, indicating an authorization bypass in the publish workflow. The issue has been patched in ve...
PT-2025-34707 · Unknown · Scratch Channel
Name of the Vulnerable Software and Affected Versions: The Scratch Channel versions 1 and 1.1 Description: The Scratch Channel, a news website, is susceptible to unauthorized article posting. A POST request to the article publishing endpoint allows posting articles in any category with any date,...
Malicious Package
Overview postingduo is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for...
CVE-2025-2856
creationtimestamp| type| source ---|---|--- 2025-07-06 01:24:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltb4fy2iax2v...
CVE-2021-12345
creationtimestamp| type| source ---|---|--- 2025-07-06 01:15:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltb3ul2nau2i 2026-05-26 15:21:17+00:00| seen| https://gist.github.com/mkrause/9ab4178c905b7e3ab46c5a3e3598adfc...
CVE-2025-6689
creationtimestamp| type| source ---|---|--- 2025-06-27 07:52:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19679 2025-06-27 10:56:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsli6g4zac2k...
CVE-2025-6662
creationtimestamp| type| source ---|---|--- 2025-06-25 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-447/ 2025-06-26 00:36:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lshv2ravun2i...
CVE-2019-12263
creationtimestamp| type| source ---|---|--- 2025-06-14 21:02:18+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lrltx6r5n32u 2025-08-31 03:00:52+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...
CVE-2025-5404
creationtimestamp| type| source ---|---|--- 2025-06-01 16:57:26+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqkq6vfu75x2 2025-06-01 20:22:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lql3oic4s22m...
CVE-2022-43496
creationtimestamp| type| source ---|---|--- 2025-05-28 19:55:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqaybnzpkt2r...
A Framework for Combined Transaction Posting and Pricing for Layer 2 Blockchains
This paper presents a comprehensive framework for transaction posting and pricing in Layer 2 L2 blockchain systems, focusing on challenges stemming from fluctuating Layer 1 L1 gas fees and the congestion issues within L2 networks. Existing methods have focused on the problem of optimal posting...
CVE-2024-30617
A Cross-Site Request Forgery CSRF vulnerability in Chamilo LMS 1.11.26 "/main/social/home.php," allows attackers to initiate a request that posts a fake post onto the user's social wall without their consent or knowledge...
CVE-2022-43712
POST requests to /web/mvc in GX Software XperienCentral version 10.36.0 and earlier were not blocked for uses that are not logged in. If an unauthorized user is able to bypass other security filters they are able to post unauthorized data to the server because of CVE-2022-22965...
CVE-2022-38639
A cross-site scripting XSS vulnerability in Markdown-Nice v1.8.22 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Community Posting field...
CVE-2020-35753
The job posting recommendation form in Persis Human Resource Management Portal Versions 17.2.00 through 17.2.35 and 19.0.00 through 19.0.20, when the "Recommend job posting" function is enabled, allows XSS via the SENDER parameter...