CVE-2020-37019

Orchard Core RC1 contains a persistent cross-site scripting vulnerability that allows remote attackers to inject malicious scripts through blog post creation. Attackers can create blog posts with embedded JavaScript in the MarkdownBodyPart.Source parameter to execute arbitrary scripts in victim...

CVE-2026-24854

creationtimestamp| type| source ---|---|--- 2026-01-30 16:17:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdnpbcmirp2m 2026-01-30 16:17:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdnpc7xua523 2026-01-30 18:00:07+00:00| seen|...

CVE-2025-4686

creationtimestamp| type| source ---|---|--- 2026-01-30 16:16:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdnpapugze2o 2026-01-30 16:22:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdnpkhhcr42g 2026-02-01 21:02:57+00:00| seen|...

EUVD-2020-30959

Orchard Core RC1 contains a persistent cross-site scripting vulnerability that allows remote attackers to inject malicious scripts through blog post creation. Attackers can create blog posts with embedded JavaScript in the MarkdownBodyPart.Source parameter to execute arbitrary scripts in victim...

CVE-2020-37019 Orchard Core RC1 - Persistent Cross-Site Scripting

Orchard Core RC1 contains a persistent cross-site scripting vulnerability that allows remote attackers to inject malicious scripts through blog post creation. Attackers can create blog posts with embedded JavaScript in the MarkdownBodyPart.Source parameter to execute arbitrary scripts in victim...

CVE-2020-37019

Orchard Core RC1 contains a persistent cross-site scripting vulnerability that allows remote attackers to inject malicious scripts through blog post creation. Attackers can create blog posts with embedded JavaScript in the MarkdownBodyPart.Source parameter to execute arbitrary scripts in victim...

CVE-2020-37019 Orchard Core RC1 - Persistent Cross-Site Scripting

Orchard Core RC1 contains a persistent cross-site scripting vulnerability that allows remote attackers to inject malicious scripts through blog post creation. Attackers can create blog posts with embedded JavaScript in the MarkdownBodyPart.Source parameter to execute arbitrary scripts in victim...

CVE-2026-21418

creationtimestamp| type| source ---|---|--- 2026-01-30 09:19:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdmxwmpqyk2c 2026-01-30 09:24:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115983322324650716 2026-01-30 10:00:38+00:00| seen|...

CVE-2026-0805

creationtimestamp| type| source ---|---|--- 2026-01-30 07:23:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdmrh3erny2a 2026-01-30 07:24:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdmrjegeuz2o 2026-01-30 07:54:39+00:00| seen|...

CVE-2026-25128

creationtimestamp| type| source ---|---|--- 2026-01-30 04:24:32+00:00| published-proof-of-concept| https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-37qj-frw5-hhjh 2026-01-30 16:17:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdnpb334mg24...

WordPress BuddyBoss Platform plugin < 2.6.0 - Subscriber+ Comment on Private Post via IDOR vulnerability

Subscriber+ Comment on Private Post via IDOR vulnerability discovered by Faris Krivic in WordPress Plugin Buddyboss Platform versions 2.6.0...

PT-2026-5416

Orchard Core RC1 contains a persistent cross-site scripting vulnerability that allows remote attackers to inject malicious scripts through blog post creation. Attackers can create blog posts with embedded JavaScript in the MarkdownBodyPart.Source parameter to execute arbitrary scripts in victim...

PT-2026-5412

PHPFusion 9.03.50 contains a persistent cross-site scripting vulnerability in the print.php page that fails to properly sanitize user-submitted message content. Attackers can inject malicious JavaScript through forum messages that will execute when the print page is generated, allowing script...

CVE-2025-71003

creationtimestamp| type| source ---|---|--- 2026-01-29 21:34:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdlqirvw7o2r 2026-01-29 21:34:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdlqj4ouab27...

CVE-2025-71007

creationtimestamp| type| source ---|---|--- 2026-01-29 19:47:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdlkk4lyu72g 2026-01-29 19:47:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdlkkw3ego2v...

CVE-2025-65889

creationtimestamp| type| source ---|---|--- 2026-01-29 17:02:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdlbdisjcz25 2026-01-29 17:03:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdlbekgnny2v...

CVE-2025-65888

creationtimestamp| type| source ---|---|--- 2026-01-29 17:02:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdlbdcamkn2h 2026-01-29 17:03:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdlbed5qzi2a...

CVE-2025-65886

creationtimestamp| type| source ---|---|--- 2026-01-29 17:02:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdlbd3ir252o 2026-01-29 17:02:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdlbe3ajbt27...

CVE-2026-1453

creationtimestamp| type| source ---|---|--- 2026-01-29 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-029-01 2026-01-29 19:47:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdlkjvo5qe2x 2026-01-29 19:47:43+00:00| seen|...

CVE-2026-24856

creationtimestamp| type| source ---|---|--- 2026-01-28 22:00:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdjbii6hqi2g 2026-01-28 23:39:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdjh2abwr523...