Exploit for Code Injection in Apache Nifi

CVE-2023-34468 Exploit !GitHub starshttps://img.shields.io...

CVE-2021-47935

creationtimestamp| type| source ---|---|--- 2026-05-10 17:05:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mljal4247t2q 2026-05-18 09:37:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mm4lb7gj2p2p 2026-09-12 10:00:08+00:00| seen| https://t.me/shimiscyberworld/1340...

CVE-2026-8260

creationtimestamp| type| source ---|---|--- 2026-05-10 15:29:09+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116550988543376529 2026-05-11 01:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mlk4sl6tqq22 2026-05-11 01:30:30+00:00| seen|...

CVE-2022-50955

creationtimestamp| type| source ---|---|--- 2026-05-10 15:11:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlj2ackmlb2r...

CVE-2021-47951 WordPress Picture Gallery 1.4.2 Stored XSS via Edit Content URL

WordPress Picture Gallery 1.4.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Edit Content URL field in the Access Control settings. Attackers can enter JavaScript payloads in the plugin options that are stored in...

CVE-2021-47951

CVE-2021-47951 concerns WordPress Picture Gallery 1.4.2, which has a stored cross-site scripting (XSS) flaw. The vulnerability allows authenticated attackers to inject JavaScript through the Edit Content URL field in the Access Control settings; payloads stored in the database can execute when th...

CVE-2021-47951

WordPress Picture Gallery 1.4.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Edit Content URL field in the Access Control settings. Attackers can enter JavaScript payloads in the plugin options that are stored in...

CVE-2021-47951 WordPress Picture Gallery 1.4.2 Stored XSS via Edit Content URL

WordPress Picture Gallery 1.4.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Edit Content URL field in the Access Control settings. Attackers can enter JavaScript payloads in the plugin options that are stored in...

CVE-2022-50961 WordPress Plugin IP2Location Country Blocker 2.26.7 Stored XSS

WordPress Plugin IP2Location Country Blocker 2.26.7 contains a stored cross-site scripting vulnerability that allows authenticated users to inject arbitrary JavaScript code through the Frontend Settings interface. Attackers can inject malicious scripts in the URL field of the Display page setting...

CVE-2022-50961

WordPress Plugin IP2Location Country Blocker 2.26.7 contains a stored cross-site scripting vulnerability that allows authenticated users to inject arbitrary JavaScript code through the Frontend Settings interface. Attackers can inject malicious scripts in the URL field of the Display page setting...

CVE-2022-50961

CVE-2022-50961 affects WordPress plugin IP2Location Country Blocker (v2.26.7). The stored XSS vulnerability allows authenticated users to inject arbitrary JavaScript via the Frontend Settings page, specifically by injecting scripts in the URL field of the Display page settings. The payload execut...

CVE-2026-8224

creationtimestamp| type| source ---|---|--- 2026-05-10 08:12:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlicsinm772n...

CVE-2026-8233

creationtimestamp| type| source ---|---|--- 2026-05-10 07:53:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlibpxnk5h2e 2026-09-04 14:00:05+00:00| published-proof-of-concept| https://t.me/apsecurity/1030 2026-09-05 01:00:27+00:00| published-proof-of-concept|...

CVE-2026-45373

creationtimestamp| type| source ---|---|--- 2026-05-10 07:52:37+00:00| published-proof-of-concept| https://github.com/Hmbown/DeepSeek-TUI/security/advisories/GHSA-88gh-2526-gfrr...

CVE-2026-8225

creationtimestamp| type| source ---|---|--- 2026-05-10 07:32:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mliake2qlj2q...

CVE-2026-8218

creationtimestamp| type| source ---|---|--- 2026-05-10 04:45:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlhxb4qkct2p 2026-05-10 22:05:10+00:00| seen| https://bsky.app/profile/intel.overresearched.net/post/3mljrdev7bc27...

CVE-2022-50970

creationtimestamp| type| source ---|---|--- 2026-05-10 04:16:34+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2022-50970 2026-05-10 15:39:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlj3silfkl2o...

CVE-2022-50962

creationtimestamp| type| source ---|---|--- 2026-05-10 04:16:33+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2022-50962 2026-05-10 15:00:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlizllrw432e...

CVE-2026-6735

In PHP versions 8.2. before 8.2.31, 8.3. before 8.3.31, 8.4. before 8.4.21, 8.5. before 8.5.6, due to improper sanitation of user data, it allows an attacker to compose an URL, which will cause the target to execute arbitrary JavaScript code XSS on the target's machine when the target is viewing...

CVE-2026-6735 XSS within PHP-FPM status endpoint

In PHP versions 8.2. before 8.2.31, 8.3. before 8.3.31, 8.4. before 8.4.21, 8.5. before 8.5.6, due to improper sanitation of user data, it allows an attacker to compose an URL, which will cause the target to execute arbitrary JavaScript code XSS on the target's machine when the target is viewing...