266192 matches found
Malicious code in bigops-timeline-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a6a5b474ef344ddb8aa478f73099e3644817aa8a87199eaa3c46f03d27baa13 On require of bigops-timeline-ui, index.js loads./adapter.js which fetches a platform-specific binary from Cloudflare Workers hosts whose names are...
WordPress Post Timeline Plugin < 2.2.6 - Cross-Site Scripting
The Post Timeline WordPress plugin before version 2.2.6 contains a reflected cross-site scripting vulnerability. The plugin does not properly sanitize and escape an invalid nonce before outputting it back in an AJAX response, which could allow attackers to execute arbitrary JavaScript code in an...
CVE-2026-67861
creationtimestamp| type| source ---|---|--- 2026-08-05 00:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msc7va7zon2g...
CVE-2026-18682
creationtimestamp| type| source ---|---|--- 2026-08-03 22:28:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dy7cso26k7dk6...
CVE-2026-69079
CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activitytimeline endpoint. The endpoint accepts a user-controlled days query parameter that was not restricted to a reasonable range. A remote, unauthenticated attacker could submit an excessively...
CVE-2026-69079 Unauthenticated Denial of Service via Unbounded Activity-Timeline Range in CTI-Transmute
CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activitytimeline endpoint. The endpoint accepts a user-controlled days query parameter that was not restricted to a reasonable range. A remote, unauthenticated attacker could submit an excessively...
EUVD-2026-52255
CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activitytimeline endpoint. The endpoint accepts a user-controlled days query parameter that was not restricted to a reasonable range. A remote, unauthenticated attacker could submit an excessively...
CVE-2026-69079
CTI-Transmute is affected by an unauthenticated Denial of Service via unbounded activity_timeline range. The /activity_timeline endpoint accepts a user-controlled days parameter not restricted to a reasonable range, allowing remote attackers to request data over an arbitrarily long period. This c...
CVE-2026-16063
The Event Booking Manager for WooCommerce (WordPress) plugin prior to version 5.3.7 is vulnerable to a stored cross-site scripting (XSS) flaw. The plugin does not sanitize or escape event timeline content submitted by users with post-editing access before storing and rendering it on the public ev...
CVE-2026-65891
creationtimestamp| type| source ---|---|--- 2026-07-29 14:56:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrs6ol56cs27...
CVE-2012-2661
creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:30+00:00| seen| https://t.me/CVEhub/13388 2026-07-30 00:00:55+00:00| seen| https://t.me/CVEhub/13388 2026-07-31 00:00:10+00:00| published-proof-of-concept| https://t.me/CVEhub/13388 2026-08-02 11:55:16+00:00| seen|...
CVE-2026-58179
creationtimestamp| type| source ---|---|--- 2026-07-29 11:28:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrrszuuitx2z 2026-07-30 09:22:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mru4hhitrt2s 2026-07-30 16:34:03+00:00| seen|...
CVE-2026-15226
creationtimestamp| type| source ---|---|--- 2026-07-29 10:00:08+00:00| seen| https://t.me/sysodmins/29465 2026-07-30 00:02:06+00:00| seen| https://t.me/sysodmins/29465...
CVE-2026-58155
creationtimestamp| type| source ---|---|--- 2026-07-29 09:08:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrrl7ln7ie2e 2026-07-29 11:19:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrrskqlp422x 2026-08-04 22:07:07+00:00| seen|...
CVE-2026-51271
creationtimestamp| type| source ---|---|--- 2026-07-28 20:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrqa6nmou724 2026-07-29 09:14:39+00:00| seen| https://gist.github.com/programmervuln/18c03cd805634bd9456d90c007a00b27 2026-07-29 16:03:17+00:00| seen|...
CVE-2026-14545
creationtimestamp| type| source ---|---|--- 2026-07-28 08:06:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mroxdaviyq2q 2026-07-28 14:14:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrpltsrhpu22...
CVE-2026-64450
creationtimestamp| type| source ---|---|--- 2026-07-27 06:24:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrmb4gzu242k...
GHSA-5PW9-F9R4-MV2R
creationtimestamp| type| source ---|---|--- 2026-07-26 02:02:09+00:00| seen| https://t.me/EchelonEyes/2791 2026-07-27 00:00:47+00:00| seen| https://t.me/EchelonEyes/2791 2026-07-28 00:00:40+00:00| seen| https://t.me/EchelonEyes/2791...
CVE-2026-62835
creationtimestamp| type| source ---|---|--- 2026-07-24 20:20:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrg6gmeec42a 2026-07-24 20:45:57+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/116976907530516421 2026-07-24 22:01:36+00:00| seen|...