112684 matches found
CVE-2026-6493
creationtimestamp| type| source ---|---|--- 2026-04-17 18:28:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjpkjox2mi26...
CVE-2026-5710
creationtimestamp| type| source ---|---|--- 2026-04-17 18:20:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjpk36v4kx2q 2026-04-17 19:27:20+00:00| seen| Telegram/Wi1I1OegQKHgOWmRgRN-F04c-SXwBn4BimJQBat4fm7Q2yU...
GHSA-C97M-VXHJ-P7J6 goldmark vulnerable to Cross-site Scripting (XSS)
Versions of the package github.com/yuin/goldmark/renderer/html before 1.7.17 are vulnerable to Cross-site Scripting XSS due to improper ordering of URL validation and normalization. The renderer validates link destinations using a prefix-based check IsDangerousURL before resolving HTML entities...
CVE-2026-6497 prasathmani TinyFileManager File Upload filemanager.php server-side request forgery
A vulnerability was determined in prasathmani TinyFileManager up to 2.6. Affected by this vulnerability is an unknown functionality of the file /filemanager.php?p= ajax=true&type=upload of the component File Upload Handler. This manipulation of the argument uploadurl causes server-side request...
CVE-2026-6489
creationtimestamp| type| source ---|---|--- 2026-04-17 14:53:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjp6ifpivu2f...
CVE-2026-35153
creationtimestamp| type| source ---|---|--- 2026-04-17 14:38:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjp5nkgni52f...
CVE-2026-6490
creationtimestamp| type| source ---|---|--- 2026-04-17 14:03:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjp3prdfks2t 2026-04-17 15:15:54+00:00| seen| Telegram/QdqC7jGSCv0UhvQQIZV0fKZEeaKKm-4Qa3u49kJ3A7UaYRQ...
OESA-2026-1977 golang security update
. Security Fixes: url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.CVE-2026-25679 Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the valu...
OESA-2026-1978 golang security update
. Security Fixes: url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.CVE-2026-25679 On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which...
CVE-2026-23779
creationtimestamp| type| source ---|---|--- 2026-04-17 10:45:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjoqmfwsst2r...
CVE-2026-23778
creationtimestamp| type| source ---|---|--- 2026-04-17 10:40:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjoqdhifmh2s 2026-04-17 11:17:26+00:00| seen| Telegram/Gicxpbsei5vwZhhkOJEP5kItUnFZEzNYMMsg3c4t0xeHr7Q 2026-04-17 11:17:38+00:00| seen|...
CVE-2025-15622
creationtimestamp| type| source ---|---|--- 2026-04-17 10:11:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjoopeyoc52r...
CVE-2026-4659
The Unlimited Elements for Elementor plugin for WordPress is vulnerable to Arbitrary File Read via the Repeater JSON/CSV URL parameter in versions up to, and including, 2.0.6. This is due to insufficient path traversal sanitization in the URLtoRelative and urlToPath functions, combined with the...
CVE-2026-6080
creationtimestamp| type| source ---|---|--- 2026-04-17 07:00:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjodzuvmyi2f 2026-04-17 16:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mjpdyoz3s726...
CVE-2026-40458
creationtimestamp| type| source ---|---|--- 2026-04-17 06:55:00+00:00| seen| https://cert.pl/en/posts/2026/04/CVE-2026-40458 2026-04-17 14:48:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjp67hbtyc2s 2026-04-17 15:15:54+00:00| seen|...
CVE-2026-4659
The Unlimited Elements for Elementor plugin for WordPress is vulnerable to Arbitrary File Read via the Repeater JSON/CSV URL parameter in versions up to, and including, 2.0.6. This is due to insufficient path traversal sanitization in the URLtoRelative and urlToPath functions, combined with the...
CVE-2026-5162
creationtimestamp| type| source ---|---|--- 2026-04-17 06:30:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjocfdxviq2f 2026-04-17 14:32:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mjp5c52pil27...
GHSA-XQ3M-2V4X-88GG
creationtimestamp| type| source ---|---|--- 2026-04-17 04:00:00+00:00| published-proof-of-concept| https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-xq3m-2v4x-88gg 2026-04-17 04:00:00+00:00| confirmed|...
