CVE-2026-42168

creationtimestamp| type| source ---|---|--- 2026-07-20 19:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr42o37kk22a...

CVE-2026-42168

django-pyas2 through 1.2.3 is vulnerable to OS command injection via the cmdreceive and cmdsend fields on the Partner model. These fields are passed directly to os.system in pyas2/utils.py without sanitization, allowing an authenticated admin user to execute arbitrary commands on the server when ...

EUVD-2025-42168

Malicious code in rifqi-donat9-sluey npm...

CVE-2024-42168

HCL MyXalytics is affected by out-of-band resource load HTTP vulnerability. An attacker can deploy a web server that returns malicious content, and then induce the application to retrieve and process that content...

CVE-2022-42168

creationtimestamp| type| source ---|---|--- 2022-10-17 18:13:18+00:00| seen| https://t.me/cibsecurity/51592...

CVE-2022-42168

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromSetIpMacBind...

CVE-2022-42168

The CVE-2022-42168 entry concerns the Tenda AC10 router with firmware version V15.03.06.23. The vulnerability is a stack overflow in the /goform/fromSetIpMacBind endpoint. The CVSS v3.1 base score is 9.8 (CRITICAL) with NETWORK attack vector, no user interaction, and no privileges required; impac...

CVE-2021-42168

creationtimestamp| type| source ---|---|--- 2022-01-24 22:17:49+00:00| seen| https://t.me/cibsecurity/36157...

CVE-2021-42168

Cross Site Scripting XSS in Sourcecodester Try My Recipe Recipe Sharing Website - CMS by oretnom23, allows attackers to gain the PHPSESID or other unspecified impacts via the fullname parameter to the loginregistration page...

CVE-2021-42168

Cross Site Scripting XSS in Sourcecodester Try My Recipe Recipe Sharing Website - CMS by oretnom23, allows attackers to gain the PHPSESID or other unspecified impacts via the fullname parameter to the loginregistration page...

CVE-2021-42168

CVE-2021-42168 affects Sourcecodester Try My Recipe (a Recipe Sharing Website CMS). The vulnerability is a Cross Site Scripting (XSS) flaw in the fullname parameter of the login_registration page, caused by insufficient input filtering/escaping. The issue can enable an attacker to obtain the PHPS...