117504 matches found
CVE-2026-48349
creationtimestamp| type| source ---|---|--- 2026-07-21 00:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mr4kwieey42l...
CVE-2026-59727
creationtimestamp| type| source ---|---|--- 2026-07-21 00:35:05+00:00| published-proof-of-concept| https://github.com/withastro/astro/security/advisories/GHSA-7pw4-f3q4-r2p2...
GHSA-H95V-H523-3MW8
creationtimestamp| type| source ---|---|--- 2026-07-21 00:31:29+00:00| seen| https://gist.github.com/alon710/07f073f92ce20c0890f37523b73f7af8...
EUVD-2026-46141
An issue in safishamsi Open-Source GRAPHIFY v.0.3.2 through v0.4.29 allows a remote attacker to execute arbitrary code via the validateurl, safefetch, buildopener, fetchhtml and downloadbinary functions...
XSSer Penetration Testing Tool 1.9
XSSer is an open source penetration testing tool that automates the process of detecting and exploiting XSS injections against different applications. It contains several options to try to bypass certain filters, and various special techniques of code injection. 12 additions, 12 modifications, 10...
CVE-2026-57495
creationtimestamp| type| source ---|---|--- 2026-07-20 23:50:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4icrfnis2e...
CVE-2026-57355
creationtimestamp| type| source ---|---|--- 2026-07-20 23:44:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mr4hxrfgkg2n 2026-07-21 09:44:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mr5jinmkg227 2026-07-21 19:44:08+00:00| seen|...
XML Injection
Overview @astrojs/rss is an Add RSS feeds to your Astro projects Affected versions of this package are vulnerable to XML Injection via the source.title and enclosure.type fields, which are interpolated directly into XML templates without proper escaping. An attacker can inject arbitrary XML...
GHSA-8J5Q-MFJ2-5Q9Q @astrojs/rss: XML Injection via Unescaped RSS Feed Fields
Summary In @astrojs/rss, the source.title and enclosure.type item fields are interpolated directly into XML template strings without XML-character escaping before being parsed by fast-xml-parser. An attacker who controls these field values can inject arbitrary XML elements into the generated RSS...
@astrojs/rss: XML Injection via Unescaped RSS Feed Fields
Summary In @astrojs/rss, the source.title and enclosure.type item fields are interpolated directly into XML template strings without XML-character escaping before being parsed by fast-xml-parser. An attacker who controls these field values can inject arbitrary XML elements into the generated RSS...
CVE-2026-47255
creationtimestamp| type| source ---|---|--- 2026-07-20 23:01:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr4flmkaao2l 2026-07-20 23:55:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4ilpwk632s...
CVE-2026-55544
creationtimestamp| type| source ---|---|--- 2026-07-20 23:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr4fkeqfif2u...
CVE-2026-64650
creationtimestamp| type| source ---|---|--- 2026-07-20 22:55:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4fbegvcg23...
CVE-2026-64651
creationtimestamp| type| source ---|---|--- 2026-07-20 22:40:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4eghjh6n2i...
CVE-2026-57121
creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:39+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-rh39-9c67-59mh...
CVE-2026-57122
creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:33+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-x92v-rpx6-p6cw...
CVE-2026-57135
creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:08+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-gqmf-56h7-rrpf...
CVE-2026-44509
creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4e5isavb2q...
CVE-2026-57145
creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:46+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-29w3-p9w9-wc47 2026-07-23 17:02:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdcvlzsfq2u...