GHSA-M3R8-8G46-QJ66

creationtimestamp| type| source ---|---|--- 2026-02-18 23:10:39+00:00| seen| https://gist.github.com/alon710/c30b614b2f8b58329464819257a9bb07...

CVE-2026-1439

Reflected Cross-Site Scripting XSS vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several endpoints include segments of the URL directly in the response without applying output encoding, allowing an attacker ...

GHSA-C37P-4QQG-3P76

creationtimestamp| type| source ---|---|--- 2026-02-18 04:20:30+00:00| seen| https://gist.github.com/alon710/d4b54418f1ac4f55847b5f5ea78c536b...

CVE-2025-70956

creationtimestamp| type| source ---|---|--- 2026-02-13 12:38:14+00:00| seen| https://gist.github.com/Lucian-code233/beab9d14683ed2bdf5543be430b91c70 2026-02-17 16:36:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf2yqt4qlu2v 2026-02-17 16:36:51+00:00| seen|...

PT-2026-23487

Name of the Vulnerable Software and Affected Versions Gogs versions prior to 0.14.2 Description The Gogs API accepts tokens in URL parameters, specifically token and access token. This can lead to information disclosure as these tokens may be logged, stored in browser history, or sent in referrer...

GHSA-7PPG-37FH-VCR6

creationtimestamp| type| source ---|---|--- 2026-02-11 22:40:05+00:00| seen| https://gist.github.com/alon710/5cd6606175d5ceb9195cb6dbaed696ec...

CVE-2026-24323

The BSP applications allow an unauthenticated user to inject malicious script content via user-controlled URL parameters that are not sufficiently sanitized. When a victim accesses a crafted URL, the injected script is executed in the victim�s browser, leading to a low impact on confidentiality a...

GHSA-Q4F2-39GR-45JH

creationtimestamp| type| source ---|---|--- 2026-02-10 06:10:05+00:00| seen| https://gist.github.com/alon710/db6c4209f64aab150c8716f6ba5f6a73...

GHSA-2WW3-72RP-WPP4

creationtimestamp| type| source ---|---|--- 2026-02-09 08:10:05+00:00| seen| https://gist.github.com/alon710/52261fea2d6335abf9dd90d11344bc38...

EUVD-2026-5678

A reflected cross-site scripting XSS vulnerability in the PDF export functionality of the TYDAC AG MAP+ solution allows unauthenticated attackers to craft a malicious URL, that if visited by a victim, will execute arbitrary JavaScript in the victim's context. Such a URL could be delivered through...

CVE-2026-20985

Improper input validation in Samsung Members prior to version 5.6.00.11 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability...

CVE-2026-1861

creationtimestamp| type| source ---|---|--- 2026-02-03 22:20:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdyfg2mq6w2a 2026-02-04 07:18:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116011138463439555 2026-02-04 13:00:14+00:00| seen|...

CVE-2026-20407

creationtimestamp| type| source ---|---|--- 2026-02-03 00:09:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdw332voxj24...

CVE-2025-15288

creationtimestamp| type| source ---|---|--- 2026-01-29 23:15:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdlw5qcws22t...

CVE-2020-36976

creationtimestamp| type| source ---|---|--- 2026-01-27 20:17:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdglcrzlsq2c...

CVE-2026-22809

creationtimestamp| type| source ---|---|--- 2026-01-24 21:25:12+00:00| seen| https://gist.github.com/alon710/9d9c15020305bb7e2d3e52c842759649 2026-01-24 22:40:42+00:00| seen| https://gist.github.com/alon710/9abd26d07048f88e13b0eccb19e938c5...

GHSA-3F44-XW83-3PMG

creationtimestamp| type| source ---|---|--- 2026-01-24 21:25:09+00:00| seen| https://gist.github.com/alon710/e66409c13b6f73b39a0b9aa2fbaab038 2026-01-24 22:35:03+00:00| seen| https://gist.github.com/alon710/d8fd91f8283e225a106f76c357b7f3dc 2026-01-24 22:40:38+00:00| seen|...

GHSA-6PMJ-XJXP-P8G9

creationtimestamp| type| source ---|---|--- 2026-01-24 21:23:05+00:00| seen| https://gist.github.com/alon710/8c70e7f988a1a227e1f9723ebe8d32bd 2026-01-24 22:19:56+00:00| seen| https://gist.github.com/alon710/ee6559d38739c068820837243e6a26a2 2026-01-24 22:19:58+00:00| seen|...

CVE-2025-2204

creationtimestamp| type| source ---|---|--- 2026-01-23 14:33:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md3w7z47ue2j...

CVE-2025-57787

A reflected cross-site scripting xss vulnerability exists in the modifyRoute functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...