185857 matches found
CVE-2026-72699
The Grav Login plugin getgrav/grav-plugin-login before 3.9.1 is vulnerable to email address enumeration. The register method in classes/Login.php throws a distinct exception EMAILNOTAVAILABLE when a submitted email address already belongs to an existing account, while allowing registration to...
CVE-2026-34959
Adminer 4.6.0 before 5.5.0 prepends the client-supplied X-Forwarded-Prefix header to $SERVER"REQUESTURI" with no trusted-proxy check and no validation of the prefix value. An attacker can supply an absolute URL e.g. X-Forwarded-Prefix: https://evil.example that flows into Location redirect header...
CVE-2026-78679
creationtimestamp| type| source ---|---|--- 2026-08-25 02:14:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/iblly34rmrd7h...
CVE-2026-72699 Grav Login Plugin before 3.9.1 Email Enumeration via Registration
The Grav Login plugin getgrav/grav-plugin-login before 3.9.1 is vulnerable to email address enumeration. The register method in classes/Login.php throws a distinct exception EMAILNOTAVAILABLE when a submitted email address already belongs to an existing account, while allowing registration to...
CVE-2026-72699 Grav Login Plugin before 3.9.1 Email Enumeration via Registration
The Grav Login plugin getgrav/grav-plugin-login before 3.9.1 is vulnerable to email address enumeration. The register method in classes/Login.php throws a distinct exception EMAILNOTAVAILABLE when a submitted email address already belongs to an existing account, while allowing registration to...
CVE-2026-72699
The Grav Login plugin (getgrav/grav-plugin-login) before 3.9.1 is vulnerable to email address enumeration . The register() method in classes/Login.php throws a distinct exception (EMAIL_NOT_AVAILABLE) when a submitted email already belongs to an existing account, while allowing registration to pr...
EUVD-2026-65213
The Grav Login plugin getgrav/grav-plugin-login before 3.9.1 is vulnerable to email address enumeration. The register method in classes/Login.php throws a distinct exception EMAILNOTAVAILABLE when a submitted email address already belongs to an existing account, while allowing registration to...
PT-2026-81455
Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic affected versions not specified Description Adobe Campaign Classic is affected by a Server-Side Request Forgery SSRF issue, which occurs when a server is tricked into making requests to an unintended location. This flaw...
PT-2026-81457
Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic affected versions not specified Description An Improper Neutralization of Special Elements used in an OS Command occurs, leading to an OS Command Injection. This allows an attacker to execute arbitrary code in the contex...
PT-2026-81456
Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic versions prior to 7.4.4 build 9401 Description An Improper Neutralization of Special Elements used in an OS Command occurs, leading to an OS Command Injection. This allows an unauthenticated attacker to execute arbitrary...
aaLogger
Dieses Repository hat keine README-Datei...
CVE-2026-78268
creationtimestamp| type| source ---|---|--- 2026-08-24 22:20:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5gsq2vvzuxa7p...
CVE-2026-19568
creationtimestamp| type| source ---|---|--- 2026-08-24 22:02:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtucllupjp2l...
CVE-2026-75542
creationtimestamp| type| source ---|---|--- 2026-08-24 21:01:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/emqi26xw6zkmq...
CVE-2026-04321
creationtimestamp| type| source ---|---|--- 2026-08-24 21:00:04+00:00| seen| Telegram/0Lzh2WjQOWsuTydOWekHZzZKDiwWQ3jcpMbWJHlr9UUA 2026-08-25 00:00:09+00:00| published-proof-of-concept| Telegram/0Lzh2WjQOWsuTydOWekHZzZKDiwWQ3jcpMbWJHlr9UUA...
ECHO-B159-47C9-E4C0
Bulletin has no description...
Metasploit-Attack-Report
لا يحتوي هذا المستودع على ملف README...
CVE-2025-3102-exploit
Questo repository non contiene un README...
Sakai Conversations has a Stored XSS Issue
Summary The Sakai Conversations tool stores topic and post messages without HTML sanitization, and the frontend renders them using LitElement's unsafeHTML directive, resulting in stored cross-site scripting XSS. Any authenticated user with access to a site that has the Conversations tool enabled...