111060 matches found
CVE-2026-61072
creationtimestamp| type| source ---|---|--- 2026-07-23 17:51:46+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-24 14:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrflyia4e32e...
CVE-2026-60918
creationtimestamp| type| source ---|---|--- 2026-07-23 17:49:10+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-60778
creationtimestamp| type| source ---|---|--- 2026-07-23 17:46:52+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-60676
creationtimestamp| type| source ---|---|--- 2026-07-23 17:45:12+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-60402
creationtimestamp| type| source ---|---|--- 2026-07-23 17:15:49+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-24 18:26:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrfy2pkj7b2r...
CVE-2026-65906
creationtimestamp| type| source ---|---|--- 2026-07-23 17:02:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrdcvtdw6i2j 2026-08-18 15:50:05+00:00| seen| https://bsky.app/profile/vulny-app.bsky.social/post/3mtekysg2w624...
CVE-2026-61184
creationtimestamp| type| source ---|---|--- 2026-07-23 16:56:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdcku3brp24 2026-07-23 18:17:10+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-29 23:07:06+00:00| seen|...
EUVD-2026-48311
Fathom Lite through 1.3.1 contains a stored cross-site scripting vulnerability in the analytics collection endpoint that allows unauthenticated attackers to inject a javascript: URI into the Top Pages dashboard by supplying a crafted hostname and pathname to the unauthenticated /collect endpoint...
CVE-2026-65697 Fathom Lite 1.3.1 Stored XSS via /collect Endpoint
Fathom Lite through 1.3.1 contains a stored cross-site scripting vulnerability in the analytics collection endpoint that allows unauthenticated attackers to inject a javascript: URI into the Top Pages dashboard by supplying a crafted hostname and pathname to the unauthenticated /collect endpoint...
CVE-2026-48534
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the IMAP Server configuration that allows authenticated attackers to inject arbitrary web script or HTML via the server URL parameter to /Archiver/ImapServerWizard.aspx. The injected payload is stored by...
NPM: PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments
NPM: PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments vulnerability discovered by ? in WordPress Npm postcss versions = 8.5.11...
Directory Traversal
Overview postcss is a PostCSS is a tool for transforming styles with JS plugins. Affected versions of this package are vulnerable to Directory Traversal via the process function. An attacker can access arbitrary files and obtain the first 10 bytes of their contents by supplying a crafted...
CVE-2026-65687
creationtimestamp| type| source ---|---|--- 2026-07-23 15:02:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrd472v7uj2j 2026-07-23 17:01:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrdcvfs6bk2m 2026-07-29 22:37:06+00:00| seen|...
CVE-2026-64813
creationtimestamp| type| source ---|---|--- 2026-07-23 14:58:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrd3xvfemu2e 2026-07-29 03:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrqx232sos2y...
PHPSpreadsheet: SSRF bypass via HTTP redirect in WEBSERVICE() domain whitelist
Summary The domain whitelist introduced in PhpSpreadsheet 5.4.0 for the WEBSERVICE formula function can be bypassed via HTTP redirect. The whitelist validates only the initial URL's hostname, but filegetcontents follows 302/301 redirects by default without re-validating the redirect target agains...
CVE-2026-61949
creationtimestamp| type| source ---|---|--- 2026-07-23 13:06:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrcvpn7bac2s...
CVE-2026-59526
creationtimestamp| type| source ---|---|--- 2026-07-23 13:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrcvevrzyn2e 2026-08-12 22:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msw5rlakev2c...
CVE-2026-59514
creationtimestamp| type| source ---|---|--- 2026-07-23 12:58:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrcvbd3cpb2u...