CVE-2026-14112

creationtimestamp| type| source ---|---|--- 2026-07-01 21:48:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmimyys6s2d 2026-07-02 08:17:19+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:46:44+00:00| seen|...

CVE-2026-14110

creationtimestamp| type| source ---|---|--- 2026-07-01 21:47:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmilraejw2y 2026-07-02 01:38:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmvjhl5pn2u 2026-07-02 08:17:09+00:00| seen|...

CVE-2026-14047

creationtimestamp| type| source ---|---|--- 2026-07-01 21:28:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmhjcuqqk2q 2026-07-02 07:50:32+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:23:28+00:00| seen|...

CVE-2026-14043

creationtimestamp| type| source ---|---|--- 2026-07-01 21:27:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmhiox3wl2l 2026-07-02 07:50:24+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-03 06:28:28+00:00| seen|...

CVE-2026-34112

creationtimestamp| type| source ---|---|--- 2026-07-01 21:27:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpmhhxvhug2v 2026-07-02 08:39:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnmzuspge2y...

CVE-2026-14051

creationtimestamp| type| source ---|---|--- 2026-07-01 21:24:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmhc4wxnz2o 2026-07-02 07:50:41+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:23:39+00:00| seen|...

CVE-2026-14055

creationtimestamp| type| source ---|---|--- 2026-07-01 21:21:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmh53m4fm2q 2026-07-02 01:44:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmvtgbjwx2l 2026-07-02 07:50:50+00:00| seen|...

CVE-2026-13998

creationtimestamp| type| source ---|---|--- 2026-07-01 21:20:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmh3pp7pf2t 2026-07-02 07:48:47+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702...

CVE-2026-55660

Tina is a headless content management system. In versions prior to @tinacms/app 2.5.6 and tinacms 3.9.3, cross-origin postMessage handlers and a rich-text URL-sanitization bypass enable stored XSS and session takeover. The library registers window message listeners — the useTina overlay handler,...

CVE-2026-49091

creationtimestamp| type| source ---|---|--- 2026-07-01 21:16:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpmgukqswx2n 2026-07-02 09:25:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnpmdrswj27 2026-07-02 13:50:27+00:00| seen|...

CVE-2026-14013

creationtimestamp| type| source ---|---|--- 2026-07-01 21:15:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmgrvqvtc2u 2026-07-02 07:49:20+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:21:55+00:00| seen|...

CVE-2026-54263

Wagtail (Django-based CMS) has a reflected XSS in the dynamic image URL generator view within the admin. A limited-permission editor could craft a URL that, when seen by a higher-privilege user, could act with that user’s credentials. Affected versions: < 7.0.8, < 7.3.3,

CVE-2026-54263

Wagtail is an open source content management system built on Django. In versions prior to 7.0.8, 7.3.3 and 7.4.2, reflected cross-site scripting XSS vulnerability exists on the dynamic image URL generator view within the Wagtail admin interface. A user with a limited-permission editor account for...

CVE-2026-54263 Wagtail: Reflected XSS in dynamic image URL generator view

Wagtail is an open source content management system built on Django. In versions prior to 7.0.8, 7.3.3 and 7.4.2, reflected cross-site scripting XSS vulnerability exists on the dynamic image URL generator view within the Wagtail admin interface. A user with a limited-permission editor account for...

CVE-2026-13941

creationtimestamp| type| source ---|---|--- 2026-07-01 21:10:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmgj5wwed2i 2026-07-02 07:46:42+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:19:26+00:00| seen|...

CVE-2026-13936

creationtimestamp| type| source ---|---|--- 2026-07-01 21:09:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmghgqlnq2d 2026-07-02 07:46:31+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702...

CVE-2026-13946

creationtimestamp| type| source ---|---|--- 2026-07-01 21:08:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmgfdoyw52o 2026-07-02 07:46:53+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 11:40:19+00:00| seen|...

CVE-2026-55660 TinaCMS: Cross-origin postMessage handlers and rich-text URL-sanitization bypass enable stored XSS and session takeover

Tina is a headless content management system. In versions prior to @tinacms/app 2.5.6 and tinacms 3.9.3, cross-origin postMessage handlers and a rich-text URL-sanitization bypass enable stored XSS and session takeover. The library registers window message listeners — the useTina overlay handler,...

CVE-2026-55660 TinaCMS: Cross-origin postMessage handlers and rich-text URL-sanitization bypass enable stored XSS and session takeover

Tina is a headless content management system. In versions prior to @tinacms/app 2.5.6 and tinacms 3.9.3, cross-origin postMessage handlers and a rich-text URL-sanitization bypass enable stored XSS and session takeover. The library registers window message listeners — the useTina overlay handler,...

CVE-2026-55660

Tina is a headless content management system. In versions prior to @tinacms/app 2.5.6 and tinacms 3.9.3, cross-origin postMessage handlers and a rich-text URL-sanitization bypass enable stored XSS and session takeover. The library registers window message listeners — the useTina overlay handler,...