112029 matches found
CVE-2026-56208
creationtimestamp| type| source ---|---|--- 2026-06-19 18:13:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monwzcdtp32g 2026-07-03 18:39:31+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpr6zgm4al2z...
CVE-2017-20276
creationtimestamp| type| source ---|---|--- 2026-06-19 18:07:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monwoylnca2g...
CVE-2026-56210
creationtimestamp| type| source ---|---|--- 2026-06-19 17:51:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monvskb57d2x...
CVE-2026-56211
creationtimestamp| type| source ---|---|--- 2026-06-19 17:49:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monvpu3zau2k...
CVE-2007-5722
creationtimestamp| type| source ---|---|--- 2026-06-19 16:45:42+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6792df86-691e-4a71-8d28-00ccfbafdf49 2026-06-23 14:04:18+00:00| exploited|...
GHSA-Q7J3-V8QV-22VQ OpenTofu: Possible arbitrary file read during certain git operations via a maliciously crafted URL
Impact Possible data exposure. Summary While downloading packages from a maliciously crafted URL, some git operations against that URL could allow arbitrary file read. This might allow disclosure of confidential information. Details OpenTofu relies on go-getter for downloading packages like...
CVE-2017-20269 Joomla! Component KissGallery 1.0.0 SQL Injection
Joomla! Component KissGallery 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to inject SQL commands through the component URL path. Attackers can supply malicious SQL code in the kissgallery endpoint to execute arbitrary database queries and extract sensitive...
CVE-2017-20269
Joomla! Component KissGallery 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to inject SQL commands through the component URL path. Attackers can supply malicious SQL code in the kissgallery endpoint to execute arbitrary database queries and extract sensitive...
GHSA-JV2H-4P9V-WF5W
creationtimestamp| type| source ---|---|--- 2026-06-19 16:11:36+00:00| seen| https://gist.github.com/alon710/27a1a02d7c391b1b2590b0cf7da6fc5e...
CVE-2020-37253
creationtimestamp| type| source ---|---|--- 2026-06-19 16:09:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monq44fjfy2h...
CVE-2026-12620
The GridTime 3000 GNSS Time Server leaks the access token in the URL parameters of some endpoints. This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0...
CVE-2026-12620
The CVE affects GridTime 3000 GNSS Time Server versions 1.0r0.03 through 1.1r0.0, where an access token is leaked in the URL parameters of certain endpoints. The issue is documented by NVD/CVE entries for CVE-2026-12620, with an attack surface described as NETWORK, requiring HIGH privileges and A...
CVE-2026-12620 Access Token Exposure in URL Parameters in GridTime™ 3000 GNSS Time Server
The GridTime 3000 GNSS Time Server leaks the access token in the URL parameters of some endpoints. This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0...
EUVD-2026-38041
The GridTime 3000 GNSS Time Server leaks the access token in the URL parameters of some endpoints. This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0...
CVE-2026-12620 Access Token Exposure in URL Parameters in GridTime™ 3000 GNSS Time Server
The GridTime 3000 GNSS Time Server leaks the access token in the URL parameters of some endpoints. This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0...
CVE-2009-4912
creationtimestamp| type| source ---|---|--- 2026-06-19 15:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3monocdn2et2f...
CVE-2026-49871
creationtimestamp| type| source ---|---|--- 2026-06-19 15:25:52+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3monnobmqmq2v 2026-06-20 09:38:14+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116781763259383270 2026-08-23 17:25:03+00:00| seen|...
CVE-2016-20093
creationtimestamp| type| source ---|---|--- 2026-06-19 15:23:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monnjjbmqj2k...
GHSA-VMHF-C436-HXJ4 JupyterLab: Stored XSS in extension manager through package metadata unsanitized URI protocol
A malicious PyPI package can place a javascript: URL in its project.urls metadata. JupyterLab's Extension Manager renders this as the extension's home-page link without validating the protocol, so a user who clicks the extension name executes attacker-controlled JavaScript in the JupyterLab origi...