23296 matches found
CVE-2026-54219
UBB.threads is vulnerable to Stored XSS via user posts and user profile fields. The application fails to properly sanitize user input, allowing low privileged attackers to inject arbitrary JavaScript that executes in a victim's browser upon viewing. Because vendor contact attempts were...
CVE-2026-10028
creationtimestamp| type| source ---|---|--- 2026-06-18 13:35:56+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mokx2qlab22b 2026-06-18 13:35:57+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mokx2r4vos2b...
CVE-2026-8461
creationtimestamp| type| source ---|---|--- 2026-06-18 13:33:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokwvxbso52s 2026-06-22 22:30:16+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3movwrv5h7f2m 2026-06-22 22:30:19+00:00| seen|...
CVE-2026-55808
creationtimestamp| type| source ---|---|--- 2026-06-18 13:15:20+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mokvvvrfyl2z 2026-06-22 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1933 2026-07-11 03:41:07+00:00| seen|...
CVE-2026-55803
creationtimestamp| type| source ---|---|--- 2026-06-18 13:15:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mokvvvrfyl2z 2026-06-22 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1933 2026-07-11 03:14:51+00:00| seen|...
EUVD-2026-37887
UBB.threads is vulnerable to Denial of Service DoS. By sending multiple concurrent requests to view any user profile on instances with many registered users, an authenticated attacker can easily exhaust database resources and completely deny access to the application for other users. Because vend...
CVE-2026-54224
UBB.threads is vulnerable to Denial of Service DoS. By sending multiple concurrent requests to view any user profile on instances with many registered users, an authenticated attacker can easily exhaust database resources and completely deny access to the application for other users. Because vend...
CVE-2026-54224
UBB.threads is affected by a Denial of Service described in CVE-2026-54224. An authenticated attacker can trigger DoS by issuing multiple concurrent requests to view user profiles on instances with many registered users, exhausting database resources and denying access to the application for othe...
CVE-2026-54219
UBB.threads is vulnerable to a Stored XSS flaw via user posts and profile fields due to insufficient input sanitization. In the confirmed case, version 7.7.5 is affected, and low-privilege attackers can inject JavaScript that executes in a victim’s browser when viewing content. Other versions may...
EUVD-2026-37882
UBB.threads is vulnerable to Stored XSS via user posts and user profile fields. The application fails to properly sanitize user input, allowing low privileged attackers to inject arbitrary JavaScript that executes in a victim's browser upon viewing. Because vendor contact attempts were...
CVE-2026-54219
UBB.threads is vulnerable to Stored XSS via user posts and user profile fields. The application fails to properly sanitize user input, allowing low privileged attackers to inject arbitrary JavaScript that executes in a victim's browser upon viewing. Because vendor contact attempts were...
CVE-2026-54219 Stored XSS in UBB.threads
UBB.threads is vulnerable to Stored XSS via user posts and user profile fields. The application fails to properly sanitize user input, allowing low privileged attackers to inject arbitrary JavaScript that executes in a victim's browser upon viewing. Because vendor contact attempts were...
CVE-2026-54419
creationtimestamp| type| source ---|---|--- 2026-06-18 12:24:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokt35ifeb2z...
CVE-2026-8811
creationtimestamp| type| source ---|---|--- 2026-06-18 12:04:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokrxde2si2f...
CVE-2026-11402
creationtimestamp| type| source ---|---|--- 2026-06-18 08:43:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokgpw4edl27...
CVE-2026-55744
creationtimestamp| type| source ---|---|--- 2026-06-18 08:38:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokggxn5qs27...
CVE-2026-55741
creationtimestamp| type| source ---|---|--- 2026-06-18 08:23:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokfm3ma622v...
CVE-2026-10736
creationtimestamp| type| source ---|---|--- 2026-06-18 08:15:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokf5nzsdj2z 2026-06-19 02:33:25+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3momciyt73y2g...