CVE-2026-13561 Edimax EW-7478APC POST Request formiNICbasic os command injection

A vulnerability was detected in Edimax EW-7478APC 1.04. The impacted element is the function formiNICbasic of the file /goform/formiNICbasic of the component POST Request Handler. The manipulation of the argument rootAPmac results in os command injection. The attack may be performed from remote...

CVE-2026-13561

A vulnerability was detected in Edimax EW-7478APC 1.04. The impacted element is the function formiNICbasic of the file /goform/formiNICbasic of the component POST Request Handler. The manipulation of the argument rootAPmac results in os command injection. The attack may be performed from remote...

CVE-2025-0824

creationtimestamp| type| source ---|---|--- 2026-06-29 10:49:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgcukkaf62d 2026-06-29 19:47:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphaxz7cbo2e...

CVE-2026-13560 Edimax EW-7478APC POST Request formAccept os command injection

A security vulnerability has been detected in Edimax EW-7478APC 1.04. The affected element is the function formAccept of the file /goform/formAccept of the component POST Request Handler. The manipulation of the argument submit-url leads to os command injection. The attack is possible to be carri...

CVE-2026-13560

Summary : CVE-2026-13560 affects Edimax EW-7478APC (firmware 1.04). The vulnerable component is the POST Request Handler’s /goform/formAccept function, where manipulating the argument submit-url enables an OS command injection . The attack is remote and the exploit has been disclosed publicly. Th...

CVE-2026-13560 Edimax EW-7478APC POST Request formAccept os command injection

A security vulnerability has been detected in Edimax EW-7478APC 1.04. The affected element is the function formAccept of the file /goform/formAccept of the component POST Request Handler. The manipulation of the argument submit-url leads to os command injection. The attack is possible to be carri...

CVE-2026-13557

A vulnerability was identified in itsourcecode Online Hotel Management System 1.0. This vulnerability affects unknown code of the file /admin/modroom/controller.php?action=add of the component POST Request Handler. Such manipulation of the argument Name leads to cross site scripting. The attack m...

CVE-2026-13556

A vulnerability was determined in itsourcecode Online Hotel Management System 1.0. This affects an unknown part of the file /admin/modusers/controller.php?action=edit of the component POST Request Handler. This manipulation of the argument Name causes cross site scripting. The attack may be...

EUVD-2026-40061

A vulnerability was identified in itsourcecode Online Hotel Management System 1.0. This vulnerability affects unknown code of the file /admin/modroom/controller.php?action=add of the component POST Request Handler. Such manipulation of the argument Name leads to cross site scripting. The attack m...

CVE-2026-13557 itsourcecode Online Hotel Management System POST Request controller.php add cross site scripting

A vulnerability was identified in itsourcecode Online Hotel Management System 1.0. This vulnerability affects unknown code of the file /admin/modroom/controller.php?action=add of the component POST Request Handler. Such manipulation of the argument Name leads to cross site scripting. The attack m...

CVE-2026-13556 itsourcecode Online Hotel Management System POST Request controller.php edit cross site scripting

A vulnerability was determined in itsourcecode Online Hotel Management System 1.0. This affects an unknown part of the file /admin/modusers/controller.php?action=edit of the component POST Request Handler. This manipulation of the argument Name causes cross site scripting. The attack may be...

CVE-2026-13556 itsourcecode Online Hotel Management System POST Request controller.php edit cross site scripting

A vulnerability was determined in itsourcecode Online Hotel Management System 1.0. This affects an unknown part of the file /admin/modusers/controller.php?action=edit of the component POST Request Handler. This manipulation of the argument Name causes cross site scripting. The attack may be...

CVE-2026-54831

creationtimestamp| type| source ---|---|--- 2026-06-29 09:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpg5oe6qse2a...

CVE-2026-13542

creationtimestamp| type| source ---|---|--- 2026-06-29 08:38:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpg3lntuwv2u 2026-06-29 10:46:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgcpp6hhv22 2026-06-29 19:48:19+00:00| seen|...

CVE-2026-13538

creationtimestamp| type| source ---|---|--- 2026-06-29 08:23:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpg2qskonm2y 2026-06-29 19:50:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphb5bkz222g...

CVE-2026-9676

creationtimestamp| type| source ---|---|--- 2026-06-29 08:19:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpg2j4zj562q 2026-06-29 10:52:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgczuutu62n 2026-06-29 20:47:24+00:00| seen|...

CVE-2026-13537

creationtimestamp| type| source ---|---|--- 2026-06-29 08:09:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpfzx2zswj2a 2026-06-29 10:48:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgctwjk7522 2026-06-29 13:09:08+00:00| seen|...

CVE-2026-13541

creationtimestamp| type| source ---|---|--- 2026-06-29 08:06:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpfzs6miwm2o 2026-06-29 11:18:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgejefew62n 2026-06-29 20:00:10+00:00| seen|...

CVE-2026-53325

creationtimestamp| type| source ---|---|--- 2026-06-29 07:52:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpfyyjq4ti2y 2026-06-29 10:40:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgcg2parh2d 2026-06-30 02:58:28+00:00| seen|...

CVE-2026-9676

The F4 Post Tree WordPress plugin before 2.0.5 does not perform capability checks or CSRF/nonce verification on one of its AJAX actions, allowing authenticated users with Subscriber-level access and above to modify the parent and menu order of arbitrary posts...