GHSA-V25J-WQCW-FVHJ

creationtimestamp| type| source ---|---|--- 2026-05-13 16:40:29+00:00| seen| https://gist.github.com/alon710/b27f7301077d94aa9dd0bb4f02951091...

CVE-2020-37217 Easy2Pilot 7 Cross-Site Request Forgery via admin.php

Easy2Pilot 7 contains a cross-site request forgery vulnerability that allows attackers to add unauthorized user accounts by tricking authenticated administrators into visiting malicious pages. Attackers can craft HTML forms targeting the admin.php?action=adduser endpoint with POST requests...

CVE-2026-31245

The mem0 1.0.0 server lacks authentication and authorization controls for its memory creation API endpoint POST /memories. The endpoint allows unauthenticated users to submit arbitrary memory records without verifying their identity or permissions. A remote attacker can exploit this by sending...

CVE-2026-45616

creationtimestamp| type| source ---|---|--- 2026-05-13 14:00:05+00:00| seen| https://t.me/GithubRedTeam/84084 2026-05-13 21:00:04+00:00| published-proof-of-concept| Telegram/O41s4ZacceniC-zmRdA20LKtlUfLN8dJaI2Rmc1hsAXigiA...

CVE-2026-0265

creationtimestamp| type| source ---|---|--- 2026-05-13 10:50:42+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/palo-alto-networks-security-advisory-av26-462 2026-05-13 19:03:35+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mlqylasqg32u 2026-05-13 20:00:00+00:00| seen|...

CVE-2017-3110

creationtimestamp| type| source ---|---|--- 2026-05-13 05:25:03+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3mlpktt6cdy2i...

CVE-2025-9988 Broadstreet <= 1.53.1 - Missing Authorization to Authenticated (Subscriber+) Advertiser Creation

The Broadstreet plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the createadvertiser AJAX action in all versions up to, and including, 1.53.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create...

CVE-2025-9988 Broadstreet <= 1.53.1 - Missing Authorization to Authenticated (Subscriber+) Advertiser Creation

The Broadstreet plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the createadvertiser AJAX action in all versions up to, and including, 1.53.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create...

CVE-2025-9988

CVE-2025-9988 affects the WordPress Broadstreet plugin (versions

CVE-2026-44260

creationtimestamp| type| source ---|---|--- 2026-05-13 03:46:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlpfd2cuim2q...

CVE-2026-45225

creationtimestamp| type| source ---|---|--- 2026-05-13 03:46:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlpfcs6lej2z...

CVE-2026-41901

creationtimestamp| type| source ---|---|--- 2026-05-13 01:34:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlp5xdbnw42p 2026-05-13 03:10:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlpddjlakx2w...

CVE-2026-1934

creationtimestamp| type| source ---|---|--- 2026-05-13 01:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlp5v3jg5j2c...

CVE-2026-8199

creationtimestamp| type| source ---|---|--- 2026-05-13 01:26:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlp5ilhpuq2e...

F5 BIG-IP和F5 BIG-IQ 命令注入漏洞

F5 BIG-IP and F5 BIG-IQ are both products from the American company F5. F5 BIG-IP is an application delivery platform that integrates functions such as network traffic management, application security management, and load balancing. F5 BIG-IQ is a software-based cloud management solution. This...

PT-2026-40559

The Broadstreet plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the create advertiser AJAX action in all versions up to, and including, 1.53.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create...

CVE-2026-6959

creationtimestamp| type| source ---|---|--- 2026-05-12 23:25:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlowr76vsy2n...

CVE-2026-42156 Flowsint: Cypher query injection in node type on node creation

Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification. Prior to 1.2.3, a remote attacker can create a node with a malicious type that can escape an existing Cypher query and an adversary can execute an arbitrary Cypher...

CVE-2026-42156 Flowsint: Cypher query injection in node type on node creation

Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification. Prior to 1.2.3, a remote attacker can create a node with a malicious type that can escape an existing Cypher query and an adversary can execute an arbitrary Cypher...

CVE-2026-42156 Flowsint: Cypher query injection in node type on node creation

Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification. Prior to 1.2.3, a remote attacker can create a node with a malicious type that can escape an existing Cypher query and an adversary can execute an arbitrary Cypher...