185970 matches found
CVE-2023-33409
CVE-2023-33409 Minical 1.0.0 é vulnerável a Cross-Site Request Forgery. Fornecedor: https://github.com/minical/minical Aplicação de demonstração: https://demo.minical.io/ PoC A aplicação não possui nenhuma proteção CSRF, portanto, uma solicitação HTTP especialmente criada pode ser usada para:...
frameworks_native_CVE-2020-0226
Questo repository non contiene un README...
roca
Dieses Repository hat keine README-Datei...
CVE-2025-505050
CVE-2025- Beschreibung: unauthinticated access to uploaded files POC: navigate to any uploaded file it will be accesed without login Entdeckt von Aljohara Abdulmohsen Alsubaie...
CVE-2019-14287-CVE-2014-6271
Dieses Repository hat keine README-Datei...
Tyr
Dieses Repository hat keine README-Datei...
vulnkeys
Questo repository non contiene un README...
CVE-2026-72699
The Grav Login plugin getgrav/grav-plugin-login before 3.9.1 is vulnerable to email address enumeration. The register method in classes/Login.php throws a distinct exception EMAILNOTAVAILABLE when a submitted email address already belongs to an existing account, while allowing registration to...
CVE-2026-34959
Adminer 4.6.0 before 5.5.0 prepends the client-supplied X-Forwarded-Prefix header to $SERVER"REQUESTURI" with no trusted-proxy check and no validation of the prefix value. An attacker can supply an absolute URL e.g. X-Forwarded-Prefix: https://evil.example that flows into Location redirect header...
CVE-2026-78679
creationtimestamp| type| source ---|---|--- 2026-08-25 02:14:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/iblly34rmrd7h...
CVE-2026-72699 Grav Login Plugin before 3.9.1 Email Enumeration via Registration
The Grav Login plugin getgrav/grav-plugin-login before 3.9.1 is vulnerable to email address enumeration. The register method in classes/Login.php throws a distinct exception EMAILNOTAVAILABLE when a submitted email address already belongs to an existing account, while allowing registration to...
CVE-2026-72699 Grav Login Plugin before 3.9.1 Email Enumeration via Registration
The Grav Login plugin getgrav/grav-plugin-login before 3.9.1 is vulnerable to email address enumeration. The register method in classes/Login.php throws a distinct exception EMAILNOTAVAILABLE when a submitted email address already belongs to an existing account, while allowing registration to...
EUVD-2026-65213
The Grav Login plugin getgrav/grav-plugin-login before 3.9.1 is vulnerable to email address enumeration. The register method in classes/Login.php throws a distinct exception EMAILNOTAVAILABLE when a submitted email address already belongs to an existing account, while allowing registration to...
CVE-2026-72699
The Grav Login plugin (getgrav/grav-plugin-login) before 3.9.1 is vulnerable to email address enumeration . The register() method in classes/Login.php throws a distinct exception (EMAIL_NOT_AVAILABLE) when a submitted email already belongs to an existing account, while allowing registration to pr...
PT-2026-81457
Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic affected versions not specified Description An Improper Neutralization of Special Elements used in an OS Command occurs, leading to an OS Command Injection. This allows an attacker to execute arbitrary code in the contex...
PT-2026-81456
Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic versions prior to 7.4.4 build 9401 Description An Improper Neutralization of Special Elements used in an OS Command occurs, leading to an OS Command Injection. This allows an unauthenticated attacker to execute arbitrary...
PT-2026-81455
Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic affected versions not specified Description Adobe Campaign Classic is affected by a Server-Side Request Forgery SSRF issue, which occurs when a server is tricked into making requests to an unintended location. This flaw...
CVE-2026-78268
creationtimestamp| type| source ---|---|--- 2026-08-24 22:20:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5gsq2vvzuxa7p...