CVE-2026-27576

creationtimestamp| type| source ---|---|--- 2026-02-21 10:10:40+00:00| seen| https://gist.github.com/alon710/63b57342d7d50b3729afe629902bba13...

GHSA-Q5FH-2HC8-F6RQ

creationtimestamp| type| source ---|---|--- 2026-02-21 09:40:40+00:00| seen| https://gist.github.com/alon710/d7954c7332e01cf40fa1ed726cd8c207...

CVE-2026-27479

creationtimestamp| type| source ---|---|--- 2026-02-21 09:16:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfebzxr5nj2h 2026-03-02 11:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mg33yxhdn62r...

CVE-2026-27452

creationtimestamp| type| source ---|---|--- 2026-02-21 07:30:35+00:00| seen| https://infosec.exchange/users/offseq/statuses/116107446506707835 2026-02-21 07:30:37+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mfe43sfnnj2p...

GHSA-V7M3-FPCR-H7M2

creationtimestamp| type| source ---|---|--- 2026-02-21 07:10:39+00:00| seen| https://gist.github.com/alon710/935450463949afbac9737b4b067b77a3...

CVE-2026-2929

creationtimestamp| type| source ---|---|--- 2026-02-21 05:17:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116106923547563735 2026-02-22 06:00:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116112754479386463 2026-02-22 06:00:32+00:00| seen|...

CVE-2026-27198

CVE-2026-27198 refers to Formwork (CMS) where versions 2.0.0–2.3.3 fail to enforce proper authorization during account creation. The issue allows an authenticated editor to create new accounts with administrative privileges by issuing roles without validating the caller’s privilege to assign such...

CVE-2026-27198 Formwork Improperly Manages Privileges During User Creation

Formwork is a flat file-based Content Management System CMS. In versions 2.0.0 through 2.3.3, the application fails to properly enforce role-based authorization during account creation. Although the system validates that the specified role exists, it does not verify whether the current user has...

CVE-2026-27198

Formwork is a flat file-based Content Management System CMS. In versions 2.0.0 through 2.3.3, the application fails to properly enforce role-based authorization during account creation. Although the system validates that the specified role exists, it does not verify whether the current user has...

CVE-2026-27198 Formwork Improperly Manages Privileges During User Creation

Formwork is a flat file-based Content Management System CMS. In versions 2.0.0 through 2.3.3, the application fails to properly enforce role-based authorization during account creation. Although the system validates that the specified role exists, it does not verify whether the current user has...

CVE-2026-27192

creationtimestamp| type| source ---|---|--- 2026-02-21 04:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116106738236454635 2026-02-21 04:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mfdrzpjksa2c...

CVE-2026-2124

creationtimestamp| type| source ---|---|--- 2026-02-21 01:03:01+00:00| seen| https://bsky.app/profile/infosecbot.bsky.social/post/3mfdggpvvt72p...

CVE-2026-22374

creationtimestamp| type| source ---|---|--- 2026-02-21 00:48:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfdfmbvhhz26...

CVE-2026-22376

creationtimestamp| type| source ---|---|--- 2026-02-21 00:45:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfdfgibsak2t...

CVE-2026-27198: Improper Privilege Management

Formwork is a flat file-based Content Management System CMS. In versions 2.0.0 through 2.3.3, the application fails to properly enforce role-based authorization during account creation. Although the system validates that the specified role exists, it does not verify whether the current user has...

Formwork 安全漏洞

Formwork is an open-source content management system CMS developed by Formwork. It is used to build and manage simple websites. Versions 2.0.0 to 2.3.3 of Formwork have security vulnerabilities. These vulnerabilities stem from improper role-based authorization during account creation, which may...

CVE-2019-25454

phpMoAdmin 1.1.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the collection parameter. Attackers can send GET requests to moadmin.php with script payloads in the collection parameter during collection...

CVE-2019-25448

OrientDB 3.0.17 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by creating users with script payloads in the name parameter. Attackers can send POST requests to the document endpoint with JavaScript code in the name field to...

CVE-2019-25448

OrientDB 3.0.17 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by creating users with script payloads in the name parameter. Attackers can send POST requests to the document endpoint with JavaScript code in the name field to...

CVE-2019-25451

phpMoAdmin 1.1.5 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized database operations by crafting malicious requests. Attackers can trick authenticated users into submitting GET requests to moadmin.php with parameters like action, db, and collectio...