PT-2026-39859

Name of the Vulnerable Software and Affected Versions DeepChat versions prior to 1.0.4-beta.1 Description An incomplete mitigation for a previous issue allows for an arbitrary protocol execution bypass, which can lead to remote code execution RCE. While restrictions were applied to the...

Apache Airflow 日志信息泄露漏洞

Apache Airflow is an open-source platform developed by the Apache Foundation in the United States. It allows for the creation, management, and monitoring of workflows. This platform features scalability and dynamic monitoring capabilities. Prior to Apache Airflow 6.5.3, there was a vulnerability...

CVE-2026-45190

creationtimestamp| type| source ---|---|--- 2026-05-10 22:45:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mljtlxkuxu2n 2026-05-10 23:56:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mljxjvtq5l24...

CVE-2026-45179

creationtimestamp| type| source ---|---|--- 2026-05-10 20:31:13+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mljm3gtlwy22 2026-05-10 22:50:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mljtuvxomw2h 2026-05-11 16:39:48+00:00| seen|...

Exploit for Code Injection in Apache Nifi

CVE-2023-34468 Exploit !GitHub starshttps://img.shields.io...

CVE-2021-47935

creationtimestamp| type| source ---|---|--- 2026-05-10 17:05:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mljal4247t2q 2026-05-18 09:37:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mm4lb7gj2p2p...

CVE-2026-8260

creationtimestamp| type| source ---|---|--- 2026-05-10 15:29:09+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116550988543376529 2026-05-11 01:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mlk4sl6tqq22 2026-05-11 01:30:30+00:00| seen|...

CVE-2022-50955

creationtimestamp| type| source ---|---|--- 2026-05-10 15:11:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlj2ackmlb2r...

CVE-2021-47951 WordPress Picture Gallery 1.4.2 Stored XSS via Edit Content URL

WordPress Picture Gallery 1.4.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Edit Content URL field in the Access Control settings. Attackers can enter JavaScript payloads in the plugin options that are stored in...

CVE-2021-47951

CVE-2021-47951 concerns WordPress Picture Gallery 1.4.2, which has a stored cross-site scripting (XSS) flaw. The vulnerability allows authenticated attackers to inject JavaScript through the Edit Content URL field in the Access Control settings; payloads stored in the database can execute when th...

CVE-2021-47951

WordPress Picture Gallery 1.4.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Edit Content URL field in the Access Control settings. Attackers can enter JavaScript payloads in the plugin options that are stored in...

CVE-2021-47951 WordPress Picture Gallery 1.4.2 Stored XSS via Edit Content URL

WordPress Picture Gallery 1.4.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Edit Content URL field in the Access Control settings. Attackers can enter JavaScript payloads in the plugin options that are stored in...

CVE-2022-50961

CVE-2022-50961 affects WordPress plugin IP2Location Country Blocker (v2.26.7). The stored XSS vulnerability allows authenticated users to inject arbitrary JavaScript via the Frontend Settings page, specifically by injecting scripts in the URL field of the Display page settings. The payload execut...

CVE-2022-50961 WordPress Plugin IP2Location Country Blocker 2.26.7 Stored XSS

WordPress Plugin IP2Location Country Blocker 2.26.7 contains a stored cross-site scripting vulnerability that allows authenticated users to inject arbitrary JavaScript code through the Frontend Settings interface. Attackers can inject malicious scripts in the URL field of the Display page setting...

CVE-2022-50961

WordPress Plugin IP2Location Country Blocker 2.26.7 contains a stored cross-site scripting vulnerability that allows authenticated users to inject arbitrary JavaScript code through the Frontend Settings interface. Attackers can inject malicious scripts in the URL field of the Display page setting...

CVE-2026-8224

creationtimestamp| type| source ---|---|--- 2026-05-10 08:12:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlicsinm772n...

CVE-2026-8233

creationtimestamp| type| source ---|---|--- 2026-05-10 07:53:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlibpxnk5h2e 2026-09-04 14:00:05+00:00| published-proof-of-concept| https://t.me/apsecurity/1030 2026-09-05 01:00:27+00:00| published-proof-of-concept|...

CVE-2026-45373

creationtimestamp| type| source ---|---|--- 2026-05-10 07:52:37+00:00| published-proof-of-concept| https://github.com/Hmbown/DeepSeek-TUI/security/advisories/GHSA-88gh-2526-gfrr...

CVE-2026-8225

creationtimestamp| type| source ---|---|--- 2026-05-10 07:32:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mliake2qlj2q...

CVE-2026-8218

creationtimestamp| type| source ---|---|--- 2026-05-10 04:45:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlhxb4qkct2p 2026-05-10 22:05:10+00:00| seen| https://bsky.app/profile/intel.overresearched.net/post/3mljrdev7bc27...