CVE-2026-2354

creationtimestamp| type| source ---|---|--- 2026-07-11 06:47:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqe2xqznbs2x 2026-07-11 10:01:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqefrmentm2c 2026-07-12 00:00:17+00:00| seen|...

MINI-2354-M6CG-MWRM

Bulletin has no description...

EUVD-2026-2354

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Lemonsoft WordPress add on allows Cross-Site Scripting XSS.This issue affects WordPress add on: 2025.7.1...

CVE-2024-2354

A vulnerability, which was classified as problematic, was found in Dreamer CMS 4.1.3. Affected is an unknown function of the file /admin/menu/toEdit. The manipulation of the argument id leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclos...

CVE-2014-2354

creationtimestamp| type| source ---|---|--- 2025-10-03 17:02:19+00:00| seen| Telegram/C5342dvjItTahjSCqjF-y9yZvwIfCJTvVvpD4GWw4wd49RM...

CVE-2023-2354

The CHP Ads Block Detector plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings reachable though an AJAX action in versions up to, and including, 3.9.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

CGA-2354-RW6P-RVH5

Bulletin has no description...

CVE-2025-2354

creationtimestamp| type| source ---|---|--- 2025-03-17 00:55:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7730 2025-03-17 02:24:42+00:00| seen| https://t.me/cvedetector/20423 2025-03-17 03:41:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkkabgpmr...

CVE-2025-2354

A vulnerability has been found in VAM Virtual Airlines Manager 2.6.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /vam/index.php. The manipulation of the argument registryid/planeicao/hubid leads to cross site scripting. The attack can be...

CVE-2025-2354 VAM Virtual Airlines Manager index.php cross site scripting

A vulnerability has been found in VAM Virtual Airlines Manager 2.6.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /vam/index.php. The manipulation of the argument registryid/planeicao/hubid leads to cross site scripting. The attack can be...

CVE-2025-2354 VAM Virtual Airlines Manager index.php cross site scripting

A vulnerability has been found in VAM Virtual Airlines Manager 2.6.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /vam/index.php. The manipulation of the argument registryid/planeicao/hubid leads to cross site scripting. The attack can be...

CVE-2024-2354

creationtimestamp| type| source ---|---|--- 2024-03-10 12:26:46+00:00| seen| https://t.me/ctinow/204230 2024-03-10 12:26:47+00:00| seen| https://t.me/ctinow/204231...

CVE-2024-2354 Dreamer CMS toEdit cross-site request forgery

A vulnerability, which was classified as problematic, was found in Dreamer CMS 4.1.3. Affected is an unknown function of the file /admin/menu/toEdit. The manipulation of the argument id leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclos...

CVE-2024-2354 Dreamer CMS toEdit cross-site request forgery

A vulnerability, which was classified as problematic, was found in Dreamer CMS 4.1.3. Affected is an unknown function of the file /admin/menu/toEdit. The manipulation of the argument id leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclos...

CVE-2024-2354

Dreamer CMS 4.1.3 contains a Cross-Site Request Forgery (CSRF) flaw in the /admin/menu/toEdit endpoint, where manipulating the id parameter can trigger the CSRF. The vulnerability is exploitable remotely and has had public exploits disclosed. Multiple connected sources corroborate the issue witho...

Advisory ROSA-SA-2024-2354

Software: shim-signed 15 OS: rosa-server79 packageevrstring: shim-signed-15-8.0.1.res7 CVE-ID: CVE-2023-40547 BDU-ID: 2024-00725 CVE-Crit: HIGH CVE-DESC.: A vulnerability exists in the UEFI shim bootloader due to failure to take measures to neutralize special elements. Exploitation of the...

CVE-2023-2354

creationtimestamp| type| source ---|---|--- 2023-08-31 12:12:56+00:00| seen| https://t.me/cibsecurity/69518...

CVE-2023-2354 CHP Ads Block Detector <= 3.9.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting

The CHP Ads Block Detector plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings reachable though an AJAX action in versions up to, and including, 3.9.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

WordPress CHP Ads Block Detector Plugin <= 3.9.4 is vulnerable to Cross Site Scripting (XSS)

Software CHP Ads Block Detector Type Plugin Vulnerable versions = 3.9.4 Fixed in 3.9.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-2354 Patch priority High CVSS severity High 6.5 Developer Claim ownership PSID a6ae7a40b730 Credits Marco Wotschka...

CVE-2022-2354

The WP-DBManager WordPress plugin before 2.80.8 does not prevent administrators from running arbitrary commands on the server in multisite installations, where only super-administrators should...