23355 matches found
PT-2026-33216
Name of the Vulnerable Software and Affected Versions Kimai affected versions not specified Description An incomplete security patch in the client-side escapeForHtml function within KimaiEscape.js allows for Stored Cross-Site Scripting XSS. The function fails to escape double quotes " and single...
CVE-2026-34631
creationtimestamp| type| source ---|---|--- 2026-04-14 23:22:29+00:00| published-proof-of-concept| Telegram/70ang71mEb6lYSNq2VZHiuuV7i7KfipPcLMkKoGk9-znXQ 2026-04-15 12:08:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjjudk3jdv2m 2026-06-13 09:07:08+00:00| seen|...
CVE-2026-35196
creationtimestamp| type| source ---|---|--- 2026-04-14 23:22:29+00:00| published-proof-of-concept| Telegram/70ang71mEb6lYSNq2VZHiuuV7i7KfipPcLMkKoGk9-znXQ 2026-04-15 12:08:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjjudrmv7g2u...
CVE-2026-41060
creationtimestamp| type| source ---|---|--- 2026-04-14 23:22:01+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-j432-4w3j-3w8j 2026-04-21 23:22:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk24rzao262t 2026-04-22 01:19:03+00:00| seen|...
CVE-2026-27282
creationtimestamp| type| source ---|---|--- 2026-04-14 23:21:52+00:00| seen| Telegram/jHpVmdM968c9lFQ4KStSRALTqvtLmQ8NC1zLLnKyLbbys0E 2026-04-15 01:56:06+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mjis4gfiax2a 2026-04-15 12:08:47+00:00| seen|...
CVE-2026-34623
creationtimestamp| type| source ---|---|--- 2026-04-14 20:28:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mji7tdynvb2m 2026-04-15 02:35:49+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3mjiudgvh662q...
CVE-2026-34624
creationtimestamp| type| source ---|---|--- 2026-04-14 20:26:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mji7og3dqh2z 2026-04-15 02:35:47+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3mjiudfflxk2j...
CVE-2026-34614
creationtimestamp| type| source ---|---|--- 2026-04-14 20:21:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mji7frytpy23...
CVE-2026-5756
creationtimestamp| type| source ---|---|--- 2026-04-14 20:17:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mji76e35s22o 2026-04-16 15:19:33+00:00| seen| Telegram/xaMuklUmIhmgdshubo3uV9apJJHbiRRivMdJ18LxU3A0Q4Q...
CVE-2026-5754
creationtimestamp| type| source ---|---|--- 2026-04-14 20:11:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mji6ut4wkl2k...
CVE-2026-27289
creationtimestamp| type| source ---|---|--- 2026-04-14 20:10:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mji6rygv4l23 2026-04-14 20:19:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mji7cuopwy2a 2026-04-14 21:25:30+00:00| published-proof-of-concept|...
CVE-2026-5752
creationtimestamp| type| source ---|---|--- 2026-04-14 20:08:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mji6pbziwj23 2026-04-14 21:25:30+00:00| published-proof-of-concept| Telegram/qw6naPQmOSFEqbc3iRVVM5dhGETt1a49wBj6uReZM5MuI0 2026-04-15 03:00:28+00:00| seen|...
CVE-2025-63743
Cross-Site Scripting vulnerability in the Snipe-IT web-based asset management system v8.3.0 to up and including v8.3.1 allows authenticated attacker with lowest privileges sufficient only to log in, to inject arbitrary JavaScript code via "Name" and "Surname" fields. The JavaScript code is execut...
ImageMagick has a heap-use-after-free via XMP profile could result in a crash when printing the values.
An heap use after free when reading an invalid XMP profile could result in a crash due to an heap use after free when printing the values...
GHSA-R83H-CRWP-3VM7 ImageMagick has a heap-use-after-free via XMP profile could result in a crash when printing the values.
An heap use after free when reading an invalid XMP profile could result in a crash due to an heap use after free when printing the values...
CVE-2026-4913
creationtimestamp| type| source ---|---|--- 2026-04-14 18:27:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjhyzpl32h2x 2026-04-15 13:55:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mjk2cdepzo2r 2026-04-15 14:45:22+00:00| seen|...
CVE-2026-34629
creationtimestamp| type| source ---|---|--- 2026-04-14 18:21:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjhypoe3v227 2026-04-14 20:17:19+00:00| seen| Telegram/l9bSu4t-Z8RXv5R9-n5DGKDhjKFYmQA28Cy4bVCP0NEotQk 2026-04-14 20:17:42+00:00| seen|...
CVE-2026-34628
creationtimestamp| type| source ---|---|--- 2026-04-14 18:21:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjhyphhnwm2h 2026-04-14 20:17:19+00:00| seen| Telegram/l9bSu4t-Z8RXv5R9-n5DGKDhjKFYmQA28Cy4bVCP0NEotQk 2026-04-14 20:23:38+00:00| seen|...