58478 matches found
CVE-2022-50958 WordPress Plugin Jetpack 9.1 Cross Site Scripting via grunion-form-view.php
WordPress Plugin Jetpack 9.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the postid parameter. Attackers can craft URLs to the grunion-form-view.php endpoint with script payloads in the postid parameter ...
CVE-2026-8229
creationtimestamp| type| source ---|---|--- 2026-05-10 07:47:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlibf7mw772v...
CVE-2026-43112 vulnerabilities
Vulnerabilities for packages: linux-aws, linux-qemu, linux-azure, linux-gcp, linux-vmware...
GHSA-HM8Q-7F3Q-5F36 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, langfuse-fips, opensearch-dashboards, kibana, librechat, langfuse, wazuh-dashboard-fips, wazuh-dashboard...
EUVD-2026-28982
A vulnerability has been found in CodeAstro Online Catering Ordering System 1.0. This affects an unknown function of the file /deleteorder.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the publ...
CVE-2026-8231
A vulnerability has been found in CodeAstro Online Catering Ordering System 1.0. This affects an unknown function of the file /deleteorder.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the publ...
CVE-2026-8219 Devs Palace ERP Online supplier-save cross site scripting
A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. The impacted element is an unknown function of the file /inventory/supplier-save. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed publicl...
Balbooa Joomla Forms Builder SQL注入漏洞
Balbooa Joomla Forms Builder is a website form building plugin provided by Balbooa Corporation, which offers visual form design and data collection features. Version 2.0.6 of Balbooa Joomla Forms Builder contains an SQL injection vulnerability. This vulnerability stems from an unauthenticated SQL...
WordPress plugin Contact Form Builder 跨站脚本漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...
PT-2026-41191
Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.5 Description An authenticated attacker can perform mass assignment via the 'POST /api/v1/evaluations/feedback' endpoint. This is possible because the FeedbackForm uses a configuration that allows extra fields,...
PT-2026-39483
Name of the Vulnerable Software and Affected Versions Jetpack version 9.1 Description A reflected cross-site scripting issue allows unauthenticated attackers to inject malicious scripts into victim browsers. This is achieved by manipulating the post id parameter within the "grunion-form-view.php"...
PT-2026-39484
Name of the Vulnerable Software and Affected Versions WordPress Contact Form Builder version 1.6.1 Description A reflected cross-site scripting issue allows unauthenticated attackers to inject malicious scripts. This is achieved by sending crafted URLs to the 'code generator.php' endpoint using t...
PT-2026-39506
Balbooa Joomla Forms Builder 2.0.6 contains an unauthenticated SQL injection vulnerability in the form submission handler that allows remote attackers to execute arbitrary SQL queries. Attackers can send POST requests to the com baforms component with malicious JSON payloads in the 'id' field...
PT-2026-39459
Name of the Vulnerable Software and Affected Versions CodeAstro Online Catering Ordering System version 1.0 Description Remote SQL injection is possible via the manipulation of the ID argument in the '/deleteorder.php' endpoint. SQL injection is a technique where malicious SQL statements are...
CVE-2026-8213
A vulnerability has been found in OSGeo gdal up to 3.13.0dev-4. Affected by this issue is the function GDSDfldsrch of the file frmts/hdf4/hdf-eos/GDapi.c of the component Grid File Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit h...
CVE-2026-42258
creationtimestamp| type| source ---|---|--- 2026-05-09 21:18:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlh6bqgjhp2c 2026-05-10 12:01:26+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mliplvolm72y 2026-07-18 12:01:14+00:00| seen|...
CVE-2026-8196
creationtimestamp| type| source ---|---|--- 2026-05-09 21:10:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlh5soy25r2h 2026-05-13 15:00:06+00:00| seen| Telegram/cc4rNasGAf6eBRoD2kZTJIxW5lr85DmN8AZG7mw1GXsUUwc...
CVE-2026-8148
creationtimestamp| type| source ---|---|--- 2026-05-09 21:02:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlh5f6gkr42g...
