266444 matches found
CVE-2026-58038 Stored XSS through javascript URLs in SVGs generated by EasyTimeline
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation timeline. This vulnerability is associated with program files includes/Timeline.Php, scripts/EasyTimeline.Pl. This issue affects timeline: from before 1.46.0, 1.45.4,...
Kibana 8.19.15, 9.3.4 Security Update (ESA-2026-49)
Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user can submit a specially crafted bulk deletion...
CVE-2026-54896
creationtimestamp| type| source ---|---|--- 2026-07-01 01:55:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkfxmo5vk26 2026-07-01 22:02:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmjfxrnov2i 2026-07-02 01:16:16+00:00| seen|...
CVE-2026-58038: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation timeline. This vulnerability is associated with program files includes/Timeline.Php, scripts/EasyTimeline.Pl. This issue affects timeline: from before 1.46.0, 1.45.4,...
CVE-2026-8857: Improper Control of Generation of Code
A vulnerability in Wikimedia Foundation timeline. This vulnerability is associated with program files scripts/EasyTimeline.Pl, includes/Timeline.Php. This issue affects timeline: from before 1.46.0, 1.45.4, 1.44.6, 1.43.9...
PT-2026-54933
A vulnerability in Wikimedia Foundation timeline. This vulnerability is associated with program files scripts/EasyTimeline.Pl, includes/Timeline.Php. This issue affects timeline: from before 1.46.0, 1.45.4, 1.44.6, 1.43.9...
PT-2026-54907
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation timeline. This vulnerability is associated with program files includes/Timeline.Php, scripts/EasyTimeline.Pl. This issue affects timeline: from before 1.46.0, 1.45.4,...
CVE-2026-58448
creationtimestamp| type| source ---|---|--- 2026-06-30 22:36:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpk2ttlbxv2h 2026-07-02 01:29:02+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmuxtxbit2o...
Accelerating the quantum-safe timeline
The quantum-safe timeline has changed For years, planning for post-quantum cryptography PQC was framed as a future problem: important, inevitable, but distant. That perspective is evolving as technology advances and organizations prepare for the scale and complexity of the transition ahead. At...
CVE-2026-10648
creationtimestamp| type| source ---|---|--- 2026-06-29 23:58:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphoxnxguj2q 2026-06-30 01:55:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphvjll4t22o...
CVE-2018-1234
creationtimestamp| type| source ---|---|--- 2026-06-29 23:41:50+00:00| seen| https://gist.github.com/tu-trinh-scale/3cef71a931e87b0427ca39b190328cc9 2026-06-30 00:00:27+00:00| seen| https://gist.github.com/tu-trinh-scale/3cef71a931e87b0427ca39b190328cc9 2026-06-30 00:11:36+00:00| seen|...
Why Post-Quantum Cryptography Starts With Credentials
Today’s encrypted data, such as credentials, may no longer remain confidential in the future because the public-key cryptography protecting it will soon be broken by quantum computers. Although no machine today can break elliptic curve cryptography or RSA, quantum hardware is advancing rapidly an...
CVE-2012-3055
creationtimestamp| type| source ---|---|--- 2026-06-28 11:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpdtftblj32y...
CVE-2026-55706
creationtimestamp| type| source ---|---|--- 2026-06-26 12:28:38+00:00| seen| https://bsky.app/profile/oxfemale.bsky.social/post/3mp6wzqtflq22 2026-07-13 17:51:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkayinfgq2z 2026-07-16 08:04:09+00:00| seen|...
Malicious code in starship-timeline (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a4e552337fa70064e0a04644ee5a64378809a85b281eda24707bc9a6eba473f [email protected] ships no real functionality. Its package.json declares a preinstall hook "preinstall": "node index.js" that runs automaticall...
CVE-2020-35173
creationtimestamp| type| source ---|---|--- 2026-06-24 17:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp2fnv6bi32r...
Dawn of the Apex Agentic Adversary
We are standing at the end of an era we never thought to mourn: the era of human-speed threats. For years, cybersecurity moved to a rhythm organizations could follow. A researcher found a bug, a CVE was cataloged, a vendor navigated a patch cycle, and weeks or even months later, a fix was deploye...
CVE-2026-11943
Akaunting 3.1.21 contains an authenticated stored cross-site scripting vulnerability in the document timeline shown on invoice and bill detail pages. An authenticated user can store HTML/JavaScript in their own profile name...
CVE-2026-11943
Akaunting 3.1.21 contains an authenticated stored cross-site scripting vulnerability in the document timeline shown on invoice and bill detail pages. An authenticated user can store HTML/JavaScript in their own profile name...
EUVD-2026-38270
Akaunting 3.1.21 contains an authenticated stored cross-site scripting vulnerability in the document timeline shown on invoice and bill detail pages. An authenticated user can store HTML/JavaScript in their own profile name...