62232 matches found
CVE-2026-20614
creationtimestamp| type| source ---|---|--- 2026-02-12 01:30:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116055069837415237 2026-02-12 01:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3memtrnln4o2v 2026-02-14 08:18:58+00:00| seen|...
GHSA-GWMX-9GCJ-332H
creationtimestamp| type| source ---|---|--- 2026-02-12 00:10:05+00:00| seen| https://gist.github.com/alon710/41968f4cd423a2eb06975ee5587fe1d5...
CVE-2026-1104: Missing Authorization
The FastDup โ Fastest WordPress Migration & Duplicator plugin for WordPress is vulnerable to unauthorized backup creation and download due to a missing capability check on REST API endpoints in all versions up to, and including, 2.7.1. This makes it possible for authenticated attackers, with...
CVE-2025-61879
In Infoblox NIOS through 9.0.7, a High-Privileged User Can Trigger an Arbitrary File Write via the Account Creation Mechanism...
CVE-2025-61879
In Infoblox NIOS through 9.0.7, a High-Privileged User Can Trigger an Arbitrary File Write via the Account Creation Mechanism...
CVE-2025-61879
In Infoblox NIOS through 9.0.7, a High-Privileged User Can Trigger an Arbitrary File Write via the Account Creation Mechanism...
PT-2026-7863
Name of the Vulnerable Software and Affected Versions Infoblox NIOS versions through 9.0.7 Description A user with high privileges can trigger an arbitrary file write through the account creation mechanism. Recommendations Update to a version later than 9.0.7...
Infoblox NIOS ๅฎๅ จๆผๆด
Infoblox NIOS is a system developed by the American company Infoblox, used for managing and automating network devices and services. It is utilized to automate the configuration and management of networks, ensuring stable network operation. The Infoblox NIOS 9.0.7 and earlier versions have securi...
lavinmq ๅฎๅ จๆผๆด
LavinMQ is an open-source message queue and streaming media server developed by CloudAMQP. Prior to LavinMQ 2.6.8, there were security vulnerabilities. These vulnerabilities stemmed from the ability of authenticated users with the Policymaker tag to bypass access controls, allowing them to create...
CVE-2025-61879: External Control of File Name or Path
In Infoblox NIOS through 9.0.7, a High-Privileged User Can Trigger an Arbitrary File Write via the Account Creation Mechanism...
CVE-2025-61879
Infoblox NIOS versions through 9.0.7 are affected by a vulnerability where a high-privileged user can trigger an arbitrary file write . The root cause is a defect in the account creation mechanism . While the documents confirm the existence of the vulnerability and its impact on integrity and con...
GHSA-FF9R-WW9C-43X8
creationtimestamp| type| source ---|---|--- 2026-02-11 23:40:05+00:00| seen| https://gist.github.com/alon710/b5bcbf27e83e870132cea62ff4e8259e...
GHSA-7PPG-37FH-VCR6
creationtimestamp| type| source ---|---|--- 2026-02-11 22:40:05+00:00| seen| https://gist.github.com/alon710/5cd6606175d5ceb9195cb6dbaed696ec...
Security update for nodejs20
This update for nodejs20 fixes the following issues: Update to 20.20.0: CVE-2026-22036: Updated undici to 6.23.0 bsc1256848 CVE-2025-59465: Add TLSSocket default error handler bsc1256573 CVE-2025-55132: Disable futimes when permission model is enabled bsc1256571 CVE-2025-55130: Require full read...
SUSE-SU-2026:0457-1 Security update for nodejs20
This update for nodejs20 fixes the following issues: - Update to 20.20.0: - CVE-2026-22036: Updated undici to 6.23.0 bsc1256848 - CVE-2025-59465: Add TLSSocket default error handler bsc1256573 - CVE-2025-55132: Disable futimes when permission model is enabled bsc1256571 - CVE-2025-55130: Require...
Improperly Controlled Modification of Dynamically-Determined Object Attributes
Overview Affected versions of this package are vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes via the /api/users endpoint. A remote attacker with a low-privileged API token can create new administrative users by abusing the "admin" parameter in a POST...
CVE-2026-25759 Statmatic affected by privilege escalation via stored cross-site scripting
Statmatic is a Laravel and Git powered content management system CMS. From 6.0.0 to before 6.2.3, a stored XSS vulnerability in content titles allows authenticated users with content creation permissions to inject malicious JavaScript that executes when viewed by higher-privileged users. Maliciou...
CVE-2026-25759
CVE-2026-25759 affects Statamic CMS (Laravel/Git-based). From version 6.0.0 up to, but not including, 6.2.3, there is a stored XSS in content titles. An authenticated user with content-creation permissions (and control-panel access) can inject JavaScript that executes for higher-privileged users,...
CVE-2026-25759
Statmatic is a Laravel and Git powered content management system CMS. From 6.0.0 to before 6.2.3, a stored XSS vulnerability in content titles allows authenticated users with content creation permissions to inject malicious JavaScript that executes when viewed by higher-privileged users. Maliciou...
CVE-2020-37186 Chevereto 3.13.4 Core - Remote Code Execution
Chevereto 3.13.4 Core contains a remote code execution vulnerability that allows attackers to inject malicious code during database configuration installation. Attackers can manipulate the database table prefix parameter to write a PHP shell file and execute arbitrary system commands through a...