Search HackerFeeds

MISP contains an improper input validation vulnerability in its ORM save path. When a user submits data through various endpoints (attribute add/edit, event edi

matched in description · 2026-09-30

The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'caption' parameter of the plugin's bt_bb_image shortcode in all

matched in description · 2026-09-30

A flaw has been found in zosmaai pi-llm-wiki up to 0.11.7. Affected is an unknown function of the file mcp/index.ts of the component wiki_capture_source MCP too

matched in description · 2026-09-30

An authentication bypass vulnerability in the captive portal of HPE Networking Instant On could allow an unauthenticated remote attacker to circumvent existing

matched in description · 2026-09-29

Dockhand before 1.0.36 contains an open redirect vulnerability in the OIDC initiation endpoint that allows unauthenticated remote attackers to redirect authenti

matched in description · 2026-09-29

mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers

matched in description · 2026-09-29

Incorrect authorization in MediaCapture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain cross-origin d

matched in description · 2026-09-29

Attacker model / Preconditions: a loaded `TXM_MODULE_USER_MODE | TXM_MODULE_MEMORY_PROTECTION` module issuing kernel dispatch calls, on a build with `TX_ENABLE_

matched in description · 2026-09-29

Flysystem is an open source file storage library for PHP. Prior to 3.35.3, the default WhitespacePathNormalizer in src/WhitespacePathNormalizer.php used by File

matched in description · 2026-09-29

Asset Suite allows unauthenticated users to access HTTPPublishAdapterTestServlet that can be used for configuration file upload, leading to information disclosu

matched in description · 2026-09-29

thegentlemen • PT

matched in description · 2026-09-24

thegentlemen • ZA

matched in description · 2026-09-21

aptoide.com • 20,012,235 accounts

matched in name · 2020-04-13

adapt.io • 9,363,740 accounts

matched in name · 2018-11-05

by CaptainSmok3r

matched in notifier · Tue, 18 Au

by CaptainSmok3r • TN

matched in target · Thu, 13 Au