Lucene search
+L

10091 matches found

OSV
OSV
added 2026/02/08 1:9 a.m.8 views

CVE-2026-2207 WeKan Activity Publication activities.js LinkedBoardActivitiesBleed information disclosure

A weakness has been identified in WeKan up to 8.20. This issue affects some unknown processing of the file server/publications/activities.js of the component Activity Publication Handler. Executing a manipulation can lead to information disclosure. It is possible to launch the attack remotely...

6.9CVSS5.8AI score
SaveExploits0References8
Cvelist
Cvelist
added 2026/02/08 1:9 a.m.42 views

CVE-2026-2207 WeKan Activity Publication activities.js LinkedBoardActivitiesBleed information disclosure

A weakness has been identified in WeKan up to 8.20. This issue affects some unknown processing of the file server/publications/activities.js of the component Activity Publication Handler. Executing a manipulation can lead to information disclosure. It is possible to launch the attack remotely...

6.9CVSS0.00342EPSS
SaveExploits0References6
NVD
NVD
added 2026/02/08 12:16 a.m.13 views

CVE-2026-2117

A vulnerability was found in itsourcecode Society Management System 1.0. The affected element is an unknown function of the file /admin/editactivity.php. Performing a manipulation of the argument activityid results in sql injection. The attack can be initiated remotely. The exploit has been made...

9.8CVSS0.00323EPSS
SaveExploits1References5
OSV
OSV
added 2026/02/08 12:16 a.m.10 views

CVE-2026-2117

A vulnerability was found in itsourcecode Society Management System 1.0. The affected element is an unknown function of the file /admin/editactivity.php. Performing a manipulation of the argument activityid results in sql injection. The attack can be initiated remotely. The exploit has been made...

9.8CVSS5.8AI score0.00323EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2026/02/08 12:0 a.m.14 views

WeKan 访问控制错误漏洞

WeKan is an open-source dashboard application developed by WeKan. Versions of WeKan prior to 8.20 contained a access control vulnerability. This vulnerability stemmed from improper handling of the file server/publications/activities.js component in the Activity Publication Handler, which could le...

6.9CVSS6AI score0.00342EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2026/02/08 12:0 a.m.15 views

itsourcecode Society Management System SQL注入漏洞

itsourcecode Society Management System is an open-source social management system developed by itsourcecode. Version 1.0 of the itsourcecode Society Management System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter activityid in the file...

9.8CVSS7.2AI score0.00323EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2026/02/08 12:0 a.m.19 views

PT-2026-6946

Name of the Vulnerable Software and Affected Versions WeKan versions prior to 8.21 Description A weakness exists in WeKan related to the Activity Publication Handler component, specifically in the processing of the file server/publications/activities.js. A manipulation of this component can lead ...

6.9CVSS5.2AI score0.00342EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
added 2026/02/07 11:32 p.m.6 views

CVE-2026-2117 itsourcecode Society Management System edit_activity.php sql injection

A vulnerability was found in itsourcecode Society Management System 1.0. The affected element is an unknown function of the file /admin/editactivity.php. Performing a manipulation of the argument activityid results in sql injection. The attack can be initiated remotely. The exploit has been made...

7.5CVSS5.5AI score0.00323EPSS
SaveExploits1References5
CVE
CVE
added 2026/02/07 11:32 p.m.28 views

CVE-2026-2117

CVE-2026-2117 affects itsourcecode Society Management System 1.0. The vulnerability is in the file /admin/edit_activity.php where manipulating the activity_id parameter results in a remote SQL injection. Exploit appears to be publicly available. Remediation guidance in connected sources suggests ...

9.8CVSS7.2AI score0.00323EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2026/02/07 11:32 p.m.42 views

CVE-2026-2117 itsourcecode Society Management System edit_activity.php sql injection

A vulnerability was found in itsourcecode Society Management System 1.0. The affected element is an unknown function of the file /admin/editactivity.php. Performing a manipulation of the argument activityid results in sql injection. The attack can be initiated remotely. The exploit has been made...

7.5CVSS0.00323EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
added 2026/02/07 12:26 a.m.11 views

SUSE CVE-2026-21696

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Starting in version 1.7.0 and prior to version 1.12.0, Wings does not consider SQLite max parameter limit when processing activity log entries allowing for low privileged user to trigger a conditi...

8.3CVSS5.6AI score0.00475EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/02/07 12:0 a.m.16 views

PT-2026-6937

Name of the Vulnerable Software and Affected Versions itsourcecode Society Management System version 1.0 Description A flaw exists in itsourcecode Society Management System version 1.0 that allows for remote SQL injection. The issue is located in the /admin/edit activity.php file, specifically...

9.8CVSS5.5AI score0.00323EPSS
SaveExploits1References11
Circl
Circl
added 2026/02/06 10:41 p.m.8 views

CVE-2026-25791

creationtimestamp| type| source ---|---|--- 2026-02-06 22:41:59+00:00| published-proof-of-concept| https://github.com/BishopFox/sliver/security/advisories/GHSA-wxrw-gvg8-fqjp 2026-02-09 21:20:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meheu7qmj72g 2026-02-09...

7.5CVSS5.8AI score0.00407EPSS
SaveExploits1References3
HackRead
HackRead
added 2026/02/06 2:55 p.m.9 views

Flickr Notifies Users of Data Breach After External Partner Security Flaw

Flickr says a third-party email vendor flaw may have exposed user names, emails, IP data, and activity logs,…...

5.4AI score
SaveExploits0
Circl
Circl
added 2026/02/06 12:6 p.m.11 views

CVE-2026-2096

creationtimestamp| type| source ---|---|--- 2026-02-06 12:06:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10700-3534d-2.html 2026-02-10 07:19:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meige2n54a23 2026-02-10 07:21:12+00:00| seen|...

9.8CVSS5.8AI score0.00519EPSS
SaveExploits0References6
OSV
OSV
added 2026/02/06 3:46 a.m.6 views

MAL-2026-786 Malicious code in @rsgweb/locale-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b1882e2ffa769f9383127f2bfc582935b3bb1145e172eb6941a0276989a983f The package @rsgweb/locale-tools was found to contain malicious code. Source: ghsa-malware...

5.6AI score
SaveExploits0References1
OSV
OSV
added 2026/02/05 6:36 p.m.7 views

MAL-2026-770 Malicious code in xpack-per-user (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd02e72044e1a432dd520594d89d568cdd80feaef160f24160f04cc549662c08 The package xpack-per-user was found to contain malicious code. Source: ghsa-malware 1182af58fca66833bb4a361e986f5ba960d9e9ab320cd787464bda92246392fb...

5.9AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/05 7:26 a.m.8 views

CVE-2026-20985

Improper input validation in Samsung Members prior to version 5.6.00.11 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability...

7CVSS5.5AI score0.00276EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/05 7:26 a.m.9 views

CVE-2026-20979

Improper privilege management in Settings prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with Settings privilege...

8.4CVSS5.5AI score0.00129EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/05 7:26 a.m.9 views

CVE-2026-20983

Improper export of android application components in Samsung Dialer prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with Samsung Dialer privilege...

8.4CVSS5.5AI score0.00129EPSS
SaveExploits0References1
Rows per page
Query Builder