111917 matches found
CVE-2026-53916
creationtimestamp| type| source ---|---|--- 2026-06-29 22:11:19+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mphiyhkhyq2g 2026-07-03 10:53:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqexp6nu22y...
CVE-2026-38639
creationtimestamp| type| source ---|---|--- 2026-06-29 21:48:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphhovmjzu2n...
CVE-2026-52760
creationtimestamp| type| source ---|---|--- 2026-06-29 21:38:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mphh55tg752z...
CVE-2026-49434
creationtimestamp| type| source ---|---|--- 2026-06-29 21:28:11+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mphgldvzkq2a 2026-07-03 10:59:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqfcdufmu2u...
CVE-2026-46417
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-next.12, 21.2.13, 20.3.21, and 19.2.22, a Server-Side Request Forgery SSRF vulnerability exists in @angular/platform-server. The issue stems from how...
Server-side Request Forgery (SSRF)
Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the readremotefile function. An attacker can access internal network resources or disclose arbitrary local files by supplying a crafted CSS file containing a malicious @import url... directive, which...
CVE-2026-57498
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, Coolify's API controllers consistently validate server ownership with Server::whereTeamId$teamId before any operation. However, multiple Livewire web UI components accept...
CVE-2026-39031
creationtimestamp| type| source ---|---|--- 2026-06-29 20:02:51+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mphbsqpagi2y 2026-06-29 21:41:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphhdtfuob2e 2026-07-13 22:00:21+00:00| seen|...
GHSA-VWXW-JRG6-9JXV
creationtimestamp| type| source ---|---|--- 2026-06-29 19:31:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116835056501762471...
SQL Injection
Overview Affected versions of this package are vulnerable to SQL Injection in the rule ID path parameter of the alert-history endpoints. An attacker can execute arbitrary database queries and access sensitive data by injecting specially crafted input. This may also allow the attacker to perform...
CVE-2026-54889
Improper Neutralization of Input During Web Page Generation XSS vulnerability in leandrocp mdex allows cross-site scripting via unsanitized URL schemes in Quill Delta output. 'Elixir.MDEx':todelta/2 converts Markdown into a Quill Delta. 'Elixir.MDEx.DeltaConverter':defaultconvertnode/3 in...
CVE-2026-54889
Summary: CVE-2026-54889 security issue in Elixir.MDEx.mdex Delta conversion path allows XSS via unsanitized URL schemes in Quill Delta output. The vulnerability arises when Elixir.MDEx.DeltaConverter.default_convert_node/3 copies the URL from link, wikilink, or image nodes into the Delta attribut...
EEF-CVE-2026-54889 Unsanitized URL schemes in MDEx Quill Delta output allow javascript: injection (XSS)
Summary Improper Neutralization of Input During Web Page Generation XSS vulnerability in leandrocp mdex allows cross-site scripting via unsanitized URL schemes in Quill Delta output. 'Elixir.MDEx':to\delta/2 converts Markdown into a Quill Delta. 'Elixir.MDEx.DeltaConverter':default\convert\node/3...
CVE-2026-57958
creationtimestamp| type| source ---|---|--- 2026-06-29 19:09:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph6tdx2xt22 2026-06-29 21:24:46+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphgf7rael2y...
CVE-2026-57946
creationtimestamp| type| source ---|---|--- 2026-06-29 18:53:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph5w56s7h2g 2026-06-29 21:17:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphfxm2eap2k...
CVE-2025-70101
creationtimestamp| type| source ---|---|--- 2026-06-29 18:53:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mph5vwj3n22g...
CVE-2026-57950
creationtimestamp| type| source ---|---|--- 2026-06-29 18:49:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph5pretwz23 2026-06-29 21:57:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphi75nrkv2n 2026-06-29 22:25:35+00:00| seen|...
CVE-2026-56780
creationtimestamp| type| source ---|---|--- 2026-06-29 18:46:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph5k4naqc2n...
CVE-2026-57948
creationtimestamp| type| source ---|---|--- 2026-06-29 18:35:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph4vqqetc2b 2026-06-29 21:28:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphglkar5j2e...