GHSA-Q4F2-39GR-45JH

creationtimestamp| type| source ---|---|--- 2026-02-10 06:10:05+00:00| seen| https://gist.github.com/alon710/db6c4209f64aab150c8716f6ba5f6a73...

GHSA-2WW3-72RP-WPP4

creationtimestamp| type| source ---|---|--- 2026-02-09 08:10:05+00:00| seen| https://gist.github.com/alon710/52261fea2d6335abf9dd90d11344bc38...

EUVD-2026-5678

A reflected cross-site scripting XSS vulnerability in the PDF export functionality of the TYDAC AG MAP+ solution allows unauthenticated attackers to craft a malicious URL, that if visited by a victim, will execute arbitrary JavaScript in the victim's context. Such a URL could be delivered through...

CVE-2026-20985

Improper input validation in Samsung Members prior to version 5.6.00.11 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability...

CVE-2026-1861

creationtimestamp| type| source ---|---|--- 2026-02-03 22:20:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdyfg2mq6w2a 2026-02-04 07:18:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116011138463439555 2026-02-04 13:00:14+00:00| seen|...

CVE-2026-20407

creationtimestamp| type| source ---|---|--- 2026-02-03 00:09:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdw332voxj24...

CVE-2025-15288

creationtimestamp| type| source ---|---|--- 2026-01-29 23:15:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdlw5qcws22t...

CVE-2020-36976

creationtimestamp| type| source ---|---|--- 2026-01-27 20:17:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdglcrzlsq2c...

CVE-2026-22809

creationtimestamp| type| source ---|---|--- 2026-01-24 21:25:12+00:00| seen| https://gist.github.com/alon710/9d9c15020305bb7e2d3e52c842759649 2026-01-24 22:40:42+00:00| seen| https://gist.github.com/alon710/9abd26d07048f88e13b0eccb19e938c5...

GHSA-3F44-XW83-3PMG

creationtimestamp| type| source ---|---|--- 2026-01-24 21:25:09+00:00| seen| https://gist.github.com/alon710/e66409c13b6f73b39a0b9aa2fbaab038 2026-01-24 22:35:03+00:00| seen| https://gist.github.com/alon710/d8fd91f8283e225a106f76c357b7f3dc 2026-01-24 22:40:38+00:00| seen|...

GHSA-6PMJ-XJXP-P8G9

creationtimestamp| type| source ---|---|--- 2026-01-24 21:23:05+00:00| seen| https://gist.github.com/alon710/8c70e7f988a1a227e1f9723ebe8d32bd 2026-01-24 22:19:56+00:00| seen| https://gist.github.com/alon710/ee6559d38739c068820837243e6a26a2 2026-01-24 22:19:58+00:00| seen|...

CVE-2025-2204

creationtimestamp| type| source ---|---|--- 2026-01-23 14:33:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md3w7z47ue2j...

CVE-2025-57787

A reflected cross-site scripting xss vulnerability exists in the modifyRoute functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...

CVE-2026-24021

creationtimestamp| type| source ---|---|--- 2026-01-21 07:18:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcw4xve6h323...

CVE-2025-58080

A reflected cross-site scripting xss vulnerability exists in the modifyHL7App functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...

CVE-2025-53516

A reflected cross-site scripting xss vulnerability exists in the downloadZip functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious url can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...

CVE-2025-54861

A reflected cross-site scripting xss vulnerability exists in the modifyCoercion functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...

CVE-2025-57787

A reflected cross-site scripting xss vulnerability exists in the modifyRoute functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...

CVE-2025-40644 Reflected Cross-Site Scripting (XSS) in QRGen's Riftzilla

Reflected Cross-Site Scripting XSS vulnerability in Riftzilla's QRGen. This vulnerability allows an attavker to execute JavaScript code in the victim's browser by sending them a malicious URL using the 'id' parameter in '/article.php'. This vulnerability can be exploited to steal sensitive user...

PT-2026-3599

Name of the Vulnerable Software and Affected Versions MedDream PACS Premium version 7.3.6.870 Description A reflected cross-site scripting xss issue exists in the emailfailedjob functionality. A crafted URL can lead to arbitrary javascript code execution. An attacker can provide a malicious URL t...