476 matches found
CVE-2026-24021
creationtimestamp| type| source ---|---|--- 2026-01-21 07:18:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcw4xve6h323...
CVE-2025-58080
A reflected cross-site scripting xss vulnerability exists in the modifyHL7App functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...
CVE-2025-53516
A reflected cross-site scripting xss vulnerability exists in the downloadZip functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious url can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...
CVE-2025-54861
A reflected cross-site scripting xss vulnerability exists in the modifyCoercion functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...
CVE-2025-57787
A reflected cross-site scripting xss vulnerability exists in the modifyRoute functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...
CVE-2025-40644 Reflected Cross-Site Scripting (XSS) in QRGen's Riftzilla
Reflected Cross-Site Scripting XSS vulnerability in Riftzilla's QRGen. This vulnerability allows an attavker to execute JavaScript code in the victim's browser by sending them a malicious URL using the 'id' parameter in '/article.php'. This vulnerability can be exploited to steal sensitive user...
PT-2026-3599
Name of the Vulnerable Software and Affected Versions MedDream PACS Premium version 7.3.6.870 Description A reflected cross-site scripting xss issue exists in the emailfailedjob functionality. A crafted URL can lead to arbitrary javascript code execution. An attacker can provide a malicious URL t...
CVE-2026-23852
creationtimestamp| type| source ---|---|--- 2026-01-19 22:21:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcsoirybhl26...
GHSA-WR3C-345M-43V9
creationtimestamp| type| source ---|---|--- 2026-01-19 09:59:15+00:00| seen| https://bsky.app/profile/sublimer.mstdn.sublimer.me.ap.brid.gy/post/3mcrevnz2zq42...
CVE-2026-23735
creationtimestamp| type| source ---|---|--- 2026-01-16 15:28:29+00:00| published-proof-of-concept| https://github.com/graphql-hive/graphql-modules/security/advisories/GHSA-53wg-r69p-v3r7 2026-01-17 00:02:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mclcqwwc3g2r 2026-01-17...
CVE-2025-9014
creationtimestamp| type| source ---|---|--- 2026-01-15 18:30:42+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115900536715101652...
PT-2026-2994
Name of the Vulnerable Software and Affected Versions Web Application affected versions not specified Description A flaw exists in a web application where improper handling of a URL parameter could allow attackers to execute code in a user's browser following login. Successful exploitation may...
CVE-2023-54334
creationtimestamp| type| source ---|---|--- 2026-01-14 01:33:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcdwgm2ojz2x...
PT-2026-2222
Name of the Vulnerable Software and Affected Versions OpenProject versions prior to 16.6.2 Description OpenProject is a web-based project management software. A user with low privileges can view the full names of other users. User IDs are assigned sequentially, allowing an attacker to extract a...
CVE-2025-40154
creationtimestamp| type| source ---|---|--- 2026-01-09 13:55:27+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mbynkdmqaw2z 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...
CVE-2019-25259
creationtimestamp| type| source ---|---|--- 2026-01-08 21:03:03+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mbwuxwms342g...
CVE-2026-21895
creationtimestamp| type| source ---|---|--- 2026-01-08 16:01:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbwe4bkhic2g 2026-01-24 21:26:52+00:00| seen| https://gist.github.com/alon710/7ff8ff77e1550d03234add83f2deb924 2026-01-24 22:42:15+00:00| seen|...
CVE-2025-67927
creationtimestamp| type| source ---|---|--- 2026-01-08 10:56:39+00:00| seen| https://gist.github.com/Darkcrai86/d1252e12f72d14b02cd255b05ac89eef 2026-01-08 17:14:39+00:00| seen| Telegram/CDQqMS4pNTE8cr8AaaEWI1JiQM6inncWlOHwQ4JVBFkRKQI...