CVE-2018-25168

Precurio Intranet Portal 2.0 contains a Cross-Site Request Forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by submitting crafted POST requests to the /public/admin/user/submitnew endpoint without CSRF tokens. The issue stems from missing CSRF pro...

CVE-2026-28465

creationtimestamp| type| source ---|---|--- 2026-03-06 11:21:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgf6zzcvux2n...

CVE-2026-28469

creationtimestamp| type| source ---|---|--- 2026-03-06 11:01:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgf5xbd7qk2s...

CVE-2026-1468

creationtimestamp| type| source ---|---|--- 2026-03-06 10:55:00+00:00| seen| https://cert.pl/en/posts/2026/03/CVE-2026-1468/ 2026-03-06 11:54:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfaw44vnm2o 2026-07-28 16:45:02+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-63...

CVE-2026-28473

creationtimestamp| type| source ---|---|--- 2026-03-06 10:17:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgf3hqrqru2k...

CVE-2026-3589

The WooCommerce WordPress plugin from versions 5.4.0 to 10.5.2 does not properly handle batch requests, which could allow unauthenticated users to make a logged in admin call non store/WC REST endpoints, and create arbitrary admin users via a CSRF attack for example...

CVE-2026-3589

The WooCommerce WordPress plugin from versions 5.4.0 to 10.5.2 does not properly handle batch requests, which could allow unauthenticated users to make a logged in admin call non store/WC REST endpoints, and create arbitrary admin users via a CSRF attack for example...

CVE-2026-3589 WooCommerce < 10.5.3 - Arbitrary Admin User Creation via CSRF

The WooCommerce WordPress plugin from versions 5.4.0 to 10.5.2 does not properly handle batch requests, which could allow unauthenticated users to make a logged in admin call non store/WC REST endpoints, and create arbitrary admin users via a CSRF attack for example...

CVE-2026-3589

The WooCommerce WordPress plugin (versions 5.4.0 through 10.5.2 ) contains a vulnerability where it does not properly handle batch requests . This flaw could allow unauthenticated users to trick a logged-in administrator into making calls to non-store WC REST endpoints . For example, an attacker ...

CVE-2026-3589 WooCommerce < 10.5.3 - Arbitrary Admin User Creation via CSRF

The WooCommerce WordPress plugin from versions 5.4.0 to 10.5.2 does not properly handle batch requests, which could allow unauthenticated users to make a logged in admin call non store/WC REST endpoints, and create arbitrary admin users via a CSRF attack for example...

CVE-2026-2830

creationtimestamp| type| source ---|---|--- 2026-03-06 08:49:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgewkafcm227...

CVE-2026-30869

creationtimestamp| type| source ---|---|--- 2026-03-06 08:41:37+00:00| published-proof-of-concept| https://github.com/siyuan-note/siyuan/security/advisories/GHSA-2h2p-mvfx-868w 2026-03-10 00:00:59+00:00| seen| https://infosec.exchange/users/offseq/statuses/116201936937270822...

CVE-2026-23925

The CVE-2026-23925 issue affects Zabbix where an authenticated User with template/host write perms can misuse configuration.import to create unauthorized objects, leading to confidentiality loss (e.g., unauthorized hosts). Public sources corroborate an authorization bypass in Zabbix frontend/API ...

CVE-2026-23925 Unauthorized host creation via configuration.import API by low-privilege user with write permissions

An authenticated Zabbix user User role with template/host write permissions is able to create objects via the configuration.import API. This can lead to confidentiality loss by creating unauthorized hosts. Note that the User role is normally not sufficient to create and edit templates/hosts even...

CVE-2026-29068

creationtimestamp| type| source ---|---|--- 2026-03-06 08:06:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgeu6smysm2o...

CVE-2026-28799

creationtimestamp| type| source ---|---|--- 2026-03-06 07:51:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgetcdbnqw2z 2026-05-06 14:30:36+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3ml6w2wjym52c...

CVE-2026-29062

creationtimestamp| type| source ---|---|--- 2026-03-06 07:49:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mget7n4uht2o 2026-05-20 14:10:20+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmc3hklk2m2e...

CVE-2026-28683

creationtimestamp| type| source ---|---|--- 2026-03-06 06:30:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgeosgmxfl2u 2026-03-06 08:06:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgeu6hj3tj26 2026-03-06 08:07:30+00:00| seen|...

CVE-2026-29041

creationtimestamp| type| source ---|---|--- 2026-03-06 06:15:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgenxlfh4v2y 2026-03-06 08:15:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgeunqzp772c 2026-03-06 08:15:55+00:00| seen|...

CVE-2026-28679

creationtimestamp| type| source ---|---|--- 2026-03-06 06:11:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgenpvtoos27 2026-03-06 08:09:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgeudrl2nt2h...