Cyber Threat Dashboard

Cybersecurity watch: alerts, vulnerabilities, news and tools to protect yourself.

1756Items

1246Last 7 days

0Today

755Critical + high

09/10/2026 23:28Last collection

HighVulnerability CVE-2026-104448

CVE-2026-104448 — YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the ajaxdeletepage handler, which…

YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the ajaxdeletepage handler, which permanently deletes a page on any GET request carrying a jsonp_callback parameter without checking a CSRF tok…

CVSS 8.1

NVD · CVE récentes02/10/2026 14:17CWE-352

HighVulnerability CVE-2026-104447

CVE-2026-104447 — YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the autoupdate UpdateAction that…

YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the autoupdate UpdateAction that allows attackers to delete installed packages via unprotected GET requests. Attackers can lure a logged-in adm…

CVSS 7.1

NVD · CVE récentes02/10/2026 14:17CWE-352