CVE-2026-8754

CVE-2026-8754 affects AstrBotDevs AstrBot up to version 4.23.5. The vulnerability is in the File Upload Handler, specifically the function post_file in astrbot/dashboard/routes/chat.py , where filename manipulation enables a path traversal. Remote exploitation is possible, with the exploit descri...

CVE-2026-8754 AstrBotDevs AstrBot File Upload chat.py post_file path traversal

A vulnerability was detected in AstrBotDevs AstrBot up to 4.23.5. Impacted is the function postfile of the file astrbot/dashboard/routes/chat.py of the component File Upload Handler. The manipulation of the argument filename results in path traversal. It is possible to launch the attack remotely...

EUVD-2026-30700

A vulnerability was detected in AstrBotDevs AstrBot up to 4.23.5. Impacted is the function postfile of the file astrbot/dashboard/routes/chat.py of the component File Upload Handler. The manipulation of the argument filename results in path traversal. It is possible to launch the attack remotely...

CVE-2026-8754

A vulnerability was detected in AstrBotDevs AstrBot up to 4.23.5. Impacted is the function postfile of the file astrbot/dashboard/routes/chat.py of the component File Upload Handler. The manipulation of the argument filename results in path traversal. It is possible to launch the attack remotely...

CVE-2018-25333

Nordex N149/4.0-4.5 Wind Turbine Web Server 4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the login parameter in login.php. Attackers can submit crafted POST requests with SQL injection payloa...

CVE-2018-25331

CVE-2018-25331 affects Zenar Content Management System. The vulnerability is a Cross-Site Scripting (XSS) in the ajax.php endpoint, where unsanitized user input is reflected in the response. Exploitation is possible via POST parameters (notably the current_page parameter), enabling unauthenticate...

CVE-2018-25331 Zenar Content Management System Cross-Site Scripting via ajax.php

Zenar Content Management System contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating form parameters in POST requests. Attackers can inject script tags through the currentpage parameter sent to the ajax.php endpoint, which...

CVE-2026-8621

creationtimestamp| type| source ---|---|--- 2026-05-17 10:02:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mm2446dhpb2n...

CVE-2026-43907

creationtimestamp| type| source ---|---|--- 2026-05-17 09:02:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlzyqsnspt2l 2026-05-20 14:47:50+00:00| seen| https://t.me/bdufstecru/3179...

CVE-2026-8739

creationtimestamp| type| source ---|---|--- 2026-05-17 09:02:35+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mlzyqregxy26 2026-05-17 12:22:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm2e2tqw5c2p...

CVE-2025-68604

creationtimestamp| type| source ---|---|--- 2026-05-17 07:32:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlztsp7hp42l...

CVE-2026-8109

creationtimestamp| type| source ---|---|--- 2026-05-17 05:56:44+00:00| seen| https://bsky.app/profile/deafnews-auto.bsky.social/post/3mlzofetvtb2l...

CVE-2026-8719

creationtimestamp| type| source ---|---|--- 2026-05-17 04:37:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlzk2kmiy32i 2026-05-17 17:12:56+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mm2ubcolsp2s 2026-05-18 05:18:36+00:00| seen|...

CVE-2026-8755

creationtimestamp| type| source ---|---|--- 2026-05-17 04:16:46+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-8755 2026-05-17 14:50:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm2mco4omb2p...

CVE-2018-25334

creationtimestamp| type| source ---|---|--- 2026-05-17 04:16:45+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2018-25334 2026-05-17 15:17:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm2nt77cup2r...

CVE-2018-25337

creationtimestamp| type| source ---|---|--- 2026-05-17 04:16:45+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2018-25337 2026-05-17 15:22:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm2o45oufr2p...

CVE-2018-25339

creationtimestamp| type| source ---|---|--- 2026-05-17 04:16:45+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2018-25339 2026-05-17 15:07:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm2nbccpw62p...

PT-2026-41556

Joomla! extension EkRishta 2.10 contains persistent cross-site scripting and SQL injection vulnerabilities that allow attackers to inject malicious code through profile fields and POST parameters. Attackers can inject script payloads in profile information fields like Address that execute when...

VulnCheck KEV: CVE-2018-5999

An issue was discovered in AsusWRT before 3.0.0.4.38410007. In the handlerequest function in router/httpd/httpd.c, processing of POST requests continues even if authentication fails...

Zenar Content Management System 跨站脚本漏洞

Zenar Content Management System is a set of open-source content management systems developed by the Zenar team. The Zenar Content Management System has a cross-site scripting vulnerability. This vulnerability stems from cross-site scripting, which allows unauthenticated attackers to inject...