{"vulnerability": "CVE-2026-10529", "sightings": [{"uuid": "443b6e74-25ad-4779-96a5-1b1bd4cc3f2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10529", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnbu5ppuib2c", "content": "CVE-2026-10529 - westboy CicadasCMS Task Scheduling Management ScheduleJobController.java cross site scripting\nCVE ID : CVE-2026-10529\n \n Published : June 2, 2026, 2:16 a.m. | 2\u00a0hours, 16\u00a0minutes ago\n \n Description : A weakness has been identified in westboy CicadasCMS up to 2...", "creation_timestamp": "2026-06-02T05:24:45.071595Z"}, {"uuid": "f6342811-dd31-47d3-ac20-32cdfc78f088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105295", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mx3rfywmyi2n", "content": "\ud83d\udfe0 CVE-2026-105295 - High (7.5)\n\nGitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updat...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-105295/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-05T01:31:40.859960Z"}, {"uuid": "48cb8843-7830-47f7-bbc9-34f911cf0a56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105293", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mx3rga3yy52s", "content": "\ud83d\udfe0 CVE-2026-105293 - High (8.1)\n\nLegcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that al...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-105293/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-05T01:31:47.988465Z"}, {"uuid": "3a2e1e1b-3230-405a-b663-17d1bb6a0e70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105293", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx3tfu5g5d27", "content": "\ud83d\udea8 CVE-2026-105293 \u2014 CVSS 9.2 CRITICAL\n\nLegcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows scrip...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105293\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-05T02:07:22.003631Z"}, {"uuid": "1bb0855a-cfc2-4e09-a500-15a77b7672cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105294", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx3tg3pwmt2w", "content": "\ud83d\udea8 CVE-2026-105294 \u2014 CVSS 9.1 CRITICAL\n\nLegcord 1.1.0 through 1.3.0 contains a configuration injection vulnerability that allows script in the Disc...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105294\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-05T02:07:29.970205Z"}, {"uuid": "caa47028-eddd-4a04-8673-83f5808663da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105293", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fydehkgs3uajf", "content": "CVE-2026-105293 - Legcord 1.1.0 through 1.3.0 Path Traversal via Theme IPC Handlers\nCVE ID : CVE-2026-105293\n \n Published : Oct. 5, 2026, 12:44 a.m. | 43\u00a0minutes ago\n \n Description : Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that...", "creation_timestamp": "2026-10-05T02:42:50.167098Z"}, {"uuid": "031c8dd5-7ef1-4fe2-905a-16e7b7277497", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105290", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5sg6i4srenjj2", "content": "CVE-2026-105290 - feelec-yishu feelcrm-os getCurlData Endpoint GoogleController.class.php server-side request forgery\nCVE ID : CVE-2026-105290\n \n Published : Oct. 5, 2026, 10:30 a.m. | 40\u00a0minutes ago\n \n Description : A vulnerability was determined in feelec-yishu feelcrm-os 1....", "creation_timestamp": "2026-10-05T11:47:13.698447Z"}, {"uuid": "ea4a1edd-68f8-4183-9665-f772dccbb378", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105291", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jrcngwpezobde", "content": "CVE-2026-105291 - feelec-yishu feelcrm-os Department Search Endpoint GroupController.class.php index cross site scripting\nCVE ID : CVE-2026-105291\n \n Published : Oct. 5, 2026, 10:45 a.m. | 25\u00a0minutes ago\n \n Description : A vulnerability was identified in feelec-yishu feelcrm-o...", "creation_timestamp": "2026-10-05T11:59:14.685386Z"}, {"uuid": "67c31026-936b-497b-868f-a513edbb27c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105293", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxca3comjh2w", "content": "CVE-2026-105293 - legcord\nVersions 1.1.0 through 1.3.0 of Legcord let code injected into a Discord page break out of the theme folder. This means an attacker could make the program launch other applications, delete\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#legcord #CVE #infosec", "creation_timestamp": "2026-10-07T15:10:05.233626Z"}, {"uuid": "98f23c43-64f1-4d58-9d2c-f39cd3b49a80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105295", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcan5husu2n", "content": "CVE-2026-105295 - gitahead\nGitAhead versions 2.5.0 through 2.7.1 install updates without checking they are genuine and stop warning about certificate problems after the first warning. This lets an attacker who can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#gitahead #CVE #infosec", "creation_timestamp": "2026-10-07T15:20:04.000801Z"}]}