CVE-2026-23656

creationtimestamp| type| source ---|---|--- 2026-03-10 16:57:37+00:00| seen| https://www.thezdi.com/blog/2026/3/10/the-march-2026-security-update-review 2026-03-10 19:07:55+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0080 2026-03-11 03:00:16+00:00| seen|...

CVE-2026-26128

creationtimestamp| type| source ---|---|--- 2026-03-10 16:57:37+00:00| seen| https://www.thezdi.com/blog/2026/3/10/the-march-2026-security-update-review 2026-03-10 19:07:55+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0080 2026-03-11 03:00:16+00:00| seen|...

CVE-2026-30945

creationtimestamp| type| source ---|---|--- 2026-03-10 11:12:42+00:00| published-proof-of-concept| https://github.com/withstudiocms/studiocms/security/advisories/GHSA-8rgj-vrfr-6hqr 2026-03-17 18:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhbkhqh6w32u...

CISOs in a Pinch: A Security Analysis of OpenClaw

Learn about OpenClaw a sovereign agent and how this can be viable for enterprises...

CVE-2026-31801

creationtimestamp| type| source ---|---|--- 2026-03-09 05:45:42+00:00| published-proof-of-concept| https://github.com/project-zot/zot/security/advisories/GHSA-85jx-fm8m-x8c6 2026-03-19 01:40:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mheumzpb7t2u...

CVE-2026-30956

creationtimestamp| type| source ---|---|--- 2026-03-08 12:12:29+00:00| published-proof-of-concept| https://github.com/OneUptime/oneuptime/security/advisories/GHSA-r5v6-2599-9g3m 2026-03-12 15:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mguo3bjdr32a...

CVE-2026-2886

creationtimestamp| type| source ---|---|--- 2026-03-07 13:40:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mghxbhyzql2m...

CVE-2026-30933

creationtimestamp| type| source ---|---|--- 2026-03-07 12:58:38+00:00| published-proof-of-concept| https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-525j-95gf-766f 2026-03-18 18:20:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhe42c7ttr2u...

CVE-2026-2874

creationtimestamp| type| source ---|---|--- 2026-03-07 10:00:16+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mghkycg5u72m 2026-03-07 10:00:17+00:00| seen| https://bsky.app/profile/potato.software/post/3mghkyczb572j...

GHSA-P6PV-Q7RC-G4H9

creationtimestamp| type| source ---|---|--- 2026-03-06 20:09:04+00:00| seen| https://github.blog/security/how-to-scan-for-vulnerabilities-with-github-security-labs-open-source-ai-powered-framework/...

CVE-2018-25200

OOP CMS BLOG 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by crafting malicious POST requests. Attackers can submit forms to the addUser.php endpoint with parameters including userName, password, email, and ro...

CVE-2018-25199 OOP CMS BLOG 1.0 SQL Injection via search parameter

OOP CMS BLOG 1.0 contains SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through multiple parameters. Attackers can inject SQL commands via the search parameter in search.php, pageid parameter in page.php, and id...

CVE-2018-25200 OOP CMS BLOG 1.0 Cross-Site Request Forgery via addUser.php

OOP CMS BLOG 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by crafting malicious POST requests. Attackers can submit forms to the addUser.php endpoint with parameters including userName, password, email, and ro...

CVE-2018-25200 OOP CMS BLOG 1.0 Cross-Site Request Forgery via addUser.php

OOP CMS BLOG 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by crafting malicious POST requests. Attackers can submit forms to the addUser.php endpoint with parameters including userName, password, email, and ro...

CVE-2018-25200

CVE-2018-25200 concerns OOP CMS BLOG 1.0 with a cross-site request forgery that lets unauthenticated attackers craft POST requests to addUser.php (parameters: userName, password, email, role) to create an administrative account. Connected sources consistently describe the flaw and its target endp...

CVE-2018-25200

OOP CMS BLOG 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by crafting malicious POST requests. Attackers can submit forms to the addUser.php endpoint with parameters including userName, password, email, and ro...

CVE-2026-26276

creationtimestamp| type| source ---|---|--- 2026-03-06 04:00:17+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mgegfntedm22...

CVE-2026-1567

creationtimestamp| type| source ---|---|--- 2026-03-06 02:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mge7oziidi2w...

CVE-2025-66024

The XWiki blog application allows users of the XWiki platform to create and manage blog posts. Versions prior to 9.15.7 are vulnerable to Stored Cross-Site Scripting XSS via the Blog Post Title. The vulnerability arises because the post title is injected directly into the HTML tag without proper...

Zsoft OOP CMS BLOG 跨站请求伪造漏洞

Zsoft OOP CMS BLOG is a content management system blog platform developed by Zsoft Company in Bangladesh. Version 1.0 of Zsoft OOP CMS BLOG contains a cross-site request forgeing vulnerability. This vulnerability stems from the addUser.php file, which has cross-site request forgeing issues,...