CVE-2026-29002

creationtimestamp| type| source ---|---|--- 2026-04-10 17:21:41+00:00| published-proof-of-concept| Telegram/VrQ9Ov0zxRZi9WqN3kvWB9KwPzyBbBtKpr0H2dFm10XhQ 2026-04-10 18:43:23+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mj5y2yfb3e2j 2026-04-17 05:37:07+00:00| seen|...

CVE-2023-29002 vulnerabilities

Vulnerabilities for packages: hubble-ui...

CVE-2025-29002

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in snstheme Simen snssimen allows PHP Local File Inclusion.This issue affects Simen: from n/a through = 4.6...

CVE-2025-29002 WordPress Simen <= 4.6 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in snstheme Simen allows PHP Local File Inclusion. This issue affects Simen: from n/a through 4.6...

CVE-2025-29002 WordPress Simen theme <= 4.6 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in snstheme Simen snssimen allows PHP Local File Inclusion.This issue affects Simen: from n/a through = 4.6...

CVE-2025-29002

CVE-2025-29002 refers to a Local File Inclusion vulnerability in the WordPress theme Simen (versions n/a through 4.6). The root cause is improper control of the filename used in PHP include/require statements, enabling PHP Local File Inclusion. Affected software: Simen theme up to 4.6. Reported C...

WordPress Simen Theme <= 4.6 is vulnerable to Local File Inclusion

Software Simen Type Theme Vulnerable versions = 4.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-29002 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID e7c41e25943d Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity Require...

CVE-2022-29002

A Cross-Site Request Forgery CSRF in XXL-Job v2.3.0 allows attackers to arbitrarily create administrator accounts via the component /gaia-job-admin/user/add...

CVE-2021-29002

A stored cross-site scripting XSS vulnerability in Plone CMS 5.2.3 exists in site-controlpanel via the "form.widgets.sitetitle" parameter...

CVE-2020-29002

includes/CologneBlueTemplate.php in the CologneBlue skin for MediaWiki through 1.35 allows XSS via a qbfind message supplied by an administrator...

CVE-2021-29002

creationtimestamp| type| source ---|---|--- 2024-04-23 19:50:44+00:00| seen| https://t.me/arpsyndicate/4773...

CVE-2023-29002

creationtimestamp| type| source ---|---|--- 2023-04-19 02:43:51+00:00| seen| https://t.me/cibsecurity/62428...

CVE-2023-29002 vulnerabilities

Vulnerabilities for packages: hubble-ui...

CVE-2023-29002

Cilium (eBPF-based dataplane) in debug mode logs contents of the cilium-secrets namespace, potentially exposing TLS private keys for Ingress/GatewayAPI. This could enable an attacker with access to debug output to intercept/modify traffic to the cluster. The issue occurs at agent restart, on secr...

CVE-2022-29002

creationtimestamp| type| source ---|---|--- 2022-05-24 00:42:10+00:00| seen| https://t.me/cibsecurity/43194...

CVE-2022-29002

A Cross-Site Request Forgery CSRF in XXL-Job v2.3.0 allows attackers to arbitrarily create administrator accounts via the component /gaia-job-admin/user/add...

CVE-2022-29002

CVE-2022-29002 affects XXL-Job v2.3.0, where CSRF in the /gaia-job-admin/user/add component allows an attacker to arbitrarily create administrator accounts. The linked sources (CNVD/OSV/GHSA/Red Hat/OSV) consistently describe lack of filtering/restrictions in that endpoint as the root cause. No r...

CVE-2021-29002

CVE-2021-29002 is a stored XSS vulnerability in Plone CMS 5.2.3 affecting the site-controlpanel via the form.widgets.site_title parameter. The connected documents consistently describe a stored XSS in Plone 5.2.3 (no details on a fixed version or patch in the provided sources). Impact is injectio...

CVE-2021-29002

A stored cross-site scripting XSS vulnerability in Plone CMS 5.2.3 exists in site-controlpanel via the "form.widgets.sitetitle" parameter...

CVE-2020-29002

includes/CologneBlueTemplate.php in the CologneBlue skin for MediaWiki through 1.35 allows XSS via a qbfind message supplied by an administrator...