PT-2026-20806

Comodo Dome Firewall 2.7.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input to the comment parameter. Attackers can inject JavaScript code through the admin profiles endpoint that executes in the...

CVE-2026-27175

creationtimestamp| type| source ---|---|--- 2026-02-18 23:00:16+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mf66nevy4q2o 2026-02-18 23:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116094115117047754 2026-02-18 23:31:59+00:00| seen|...

CVE-2026-2495

creationtimestamp| type| source ---|---|--- 2026-02-18 09:16:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf4qn2e2t62x 2026-02-18 09:34:57+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mf4rnecges2h 2026-02-18 10:30:30+00:00| seen|...

CVE-2026-23599

creationtimestamp| type| source ---|---|--- 2026-02-18 00:16:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf3shdxvmq2v 2026-02-18 01:30:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mf3wl5z6nx2w 2026-02-18 01:30:32+00:00| seen|...

Graylog Web Interface 安全漏洞

The Graylog Web Interface is a web interface provided by the American company Graylog. Version 2.2.3 of the Graylog Web Interface contains a security vulnerability. This vulnerability arises from improper access control when modifying the user ID in the URL. It may allow authenticated users to...

Important: Red Hat Security Advisory: OpenShift Security Profiles Operator bug fix and enhancement update

An updated OpenShift Security Profiles Operator image that fixes various bugs and adds new enhancements is now available for the Red Hat OpenShift Enterprise 4 catalog. The Security Profiles Operator v0.10.0 is now available. See the documentation for release information:...

CVE-2026-26280

creationtimestamp| type| source ---|---|--- 2026-02-17 19:07:11+00:00| published-proof-of-concept| https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-9c88-49p5-5ggf 2026-02-19 21:01:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfaiiph3fr2h...

CVE-2026-2630

creationtimestamp| type| source ---|---|--- 2026-02-17 19:00:16+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mf3arc7e732c 2026-02-17 19:00:22+00:00| seen| https://infosec.exchange/users/offseq/statuses/116087509065355590 2026-02-17 19:47:46+00:00| seen|...

CVE-2025-65716

creationtimestamp| type| source ---|---|--- 2026-02-17 16:12:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf2xfwcmsd2f 2026-02-17 16:12:56+00:00| seen| https://bsky.app/profile/potato.software/post/3mf2xg47ryk25 2026-02-18 13:43:09+00:00| seen|...

PT-2026-23528

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.2.12 Description The OpenClaw Nostr channel plugin, when installed and enabled, exposes unauthenticated HTTP endpoints at /api/channels/nostr/:accountId/profile and /api/channels/nostr/:accountId/profile/import...

WordPress Paytium: Mollie payment forms & donations plugin <= 4.3.7 - Missing Authorization in 'check_for_verified_profiles' vulnerability

Missing Authorization in 'checkforverifiedprofiles' vulnerability discovered by WordFence in WordPress Plugin Paytium versions = 4.3.7...

CERTFR-2026-ACT-007

creationtimestamp| type| source ---|---|--- 2026-02-16 12:45:50+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mey3eubk2s26 2026-02-16 12:45:54+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116080374524280085 2026-02-16 12:59:54+00:00| seen|...

CVE-2025-69752

An issue in the "My Details" user profile functionality of Ideagen Q-Pulse 7.1.0.32 allows an authenticated user to view other users' profile information by modifying the objectKey HTTP parameter in the My Details page URL...

CVE-2026-1320

creationtimestamp| type| source ---|---|--- 2026-02-12 14:30:22+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3meo7e3tadj2h 2026-02-12 14:30:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/116058136270781151...

CVE-2025-69752

An issue in the "My Details" user profile functionality of Ideagen Q-Pulse 7.1.0.32 allows an authenticated user to view other users' profile information by modifying the objectKey HTTP parameter in the My Details page URL...

CVE-2025-69752

An issue in the "My Details" user profile functionality of Ideagen Q-Pulse 7.1.0.32 allows an authenticated user to view other users' profile information by modifying the objectKey HTTP parameter in the My Details page URL...

CVE-2025-69752

A security vulnerability in Ideagen Q-Pulse 7.1.0.32 affects the "My Details" user profile functionality . This flaw allows an authenticated user to access and view the profile information of other users by manipulating the objectKey HTTP parameter within the My Details page URL. No specific reme...

CVE-2026-1560

creationtimestamp| type| source ---|---|--- 2026-02-11 09:00:34+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mel4hgvx7e2a 2026-02-11 09:00:37+00:00| seen| https://infosec.exchange/users/offseq/statuses/116051177122807179 2026-02-11 09:59:59+00:00| seen|...

CVE-2026-25496

Craft is a platform for creating digital experiences. In Craft versions 4.0.0-RC1 through 4.16.17 and 5.0.0-RC1 through 5.8.21, a stored XSS vulnerability exists in the Number field type settings. The Prefix and Suffix fields are rendered using the |md|raw Twig filter without proper escaping,...

CVE-2026-2185

creationtimestamp| type| source ---|---|--- 2026-02-08 21:00:16+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3meetbluowq2h 2026-02-08 21:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116037020144793622 2026-02-09 00:30:29+00:00| seen|...