8 matches found
CVE-2026-15070
creationtimestamp| type| source ---|---|--- 2026-07-10 05:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqbejh3oro2m 2026-07-10 05:30:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbg7q26bd2w 2026-07-10 05:52:25+00:00| seen|...
CVE-2026-15070 Salon Booking System <= 10.30.32 - Cross-Site Request Forgery to Remote Code Execution via 'value' Parameter
The Salon Booking System – Free Version plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 10.30.32. This is due to missing or incorrect nonce validation on the setCustomText function. This makes it possible for unauthenticated attackers to inje...
CVE-2025-15070
creationtimestamp| type| source ---|---|--- 2025-12-29 08:59:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb4hv6or2v2c...
CVE-2020-15070
Zulip Server 2.x before 2.1.7 allows eval injection if a privileged attacker were able to write directly to the postgres database, and chose to write a crafted custom profile field value...
CVE-2020-15070
Zulip Server 2.x before 2.1.7 allows eval injection if a privileged attacker were able to write directly to the postgres database, and chose to write a crafted custom profile field value...
CVE-2020-15070
Zulip Server 2.x before 2.1.7 is affected by an eval-injection vulnerability that an attacker with privilege and access to write to the PostgreSQL database can exploit by crafting a custom profile field value. The root cause is the ability to inject and evaluate code via a crafted value stored in...