PT-2026-41544

Name of the Vulnerable Software and Affected Versions AstrBotDevs AstrBot versions prior to 4.23.6 Description A path traversal issue exists in the File Upload Handler component within the post file function of the astrbot/dashboard/routes/chat.py file. This occurs when the filename argument is...

PT-2026-41557

Zenar Content Management System contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating form parameters in POST requests. Attackers can inject script tags through the current page parameter sent to the ajax.php endpoint, whic...

CVE-2026-43909

creationtimestamp| type| source ---|---|--- 2026-05-16 21:01:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlyqlr6b4i2n...

CVE-2026-34253

creationtimestamp| type| source ---|---|--- 2026-05-16 17:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlyd4dne5f2s...

CVE-2021-47977

creationtimestamp| type| source ---|---|--- 2026-05-16 16:47:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlyce4ww7t2v...

CVE-2021-47957

creationtimestamp| type| source ---|---|--- 2026-05-16 16:39:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlybwmrg3n2c...

CVE-2021-47934

MyBB Timeline Plugin 1.0 contains cross-site scripting vulnerabilities that allow attackers to inject malicious scripts through thread titles, post content, and user profile fields like Location and Bio. Attackers can also exploit a cross-site request forgery vulnerability in the timeline.php...

CVE-2021-47954

LayerBB 1.1.4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the searchquery parameter. Attackers can send POST requests to /search.php with malicious searchquery values using CASE WHEN statements to extra...

CVE-2021-47975 WordPress Plugin WP Learn Manager 1.1.2 Stored XSS

WP Learn Manager 1.1.2 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts through the fieldtitle parameter. Attackers can submit POST requests to the jslmfieldordering page with XSS payloads in the fieldtitle field to execute...

CVE-2021-47956

The connected documents identify CVE-2021-47956 as affecting EgavilanMedia PHPCRUD 1.0 and describe a SQL injection vulnerability allowing unauthenticated attackers to manipulate database queries via the firstname parameter. Exploitation details include sending crafted POST requests to insert.php...

EUVD-2021-34841

LayerBB 1.1.4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the searchquery parameter. Attackers can send POST requests to /search.php with malicious searchquery values using CASE WHEN statements to extra...

CVE-2021-47954 LayerBB 1.1.4 SQL Injection via search_query Parameter

LayerBB 1.1.4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the searchquery parameter. Attackers can send POST requests to /search.php with malicious searchquery values using CASE WHEN statements to extra...

EUVD-2021-34840

MyBB Timeline Plugin 1.0 contains cross-site scripting vulnerabilities that allow attackers to inject malicious scripts through thread titles, post content, and user profile fields like Location and Bio. Attackers can also exploit a cross-site request forgery vulnerability in the timeline.php...

CVE-2021-47934 MyBB Timeline Plugin 1.0 Cross-Site Scripting and CSRF

MyBB Timeline Plugin 1.0 contains cross-site scripting vulnerabilities that allow attackers to inject malicious scripts through thread titles, post content, and user profile fields like Location and Bio. Attackers can also exploit a cross-site request forgery vulnerability in the timeline.php...

CVE-2021-47934

MyBB Timeline Plugin 1.0 contains cross-site scripting vulnerabilities that allow attackers to inject malicious scripts through thread titles, post content, and user profile fields like Location and Bio. Attackers can also exploit a cross-site request forgery vulnerability in the timeline.php...

CVE-2021-47934

MyBB Timeline Plugin 1.0 is affected by cross-site scripting (XSS) in thread titles, post content, and user profile fields (Location, Bio). A cross-site request forgery (CSRF) in the timeline.php profile action can be exploited to change a user’s cover picture via malicious forms that execute whe...

CVE-2026-44826

creationtimestamp| type| source ---|---|--- 2026-05-16 15:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mly4ft64le2e...

CVE-2026-5715

creationtimestamp| type| source ---|---|--- 2026-05-16 12:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlxu4adjiv2i...

CVE-2026-44554

creationtimestamp| type| source ---|---|--- 2026-05-16 12:03:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlxscvgckx2r...

CVE-2026-44553

creationtimestamp| type| source ---|---|--- 2026-05-16 12:01:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlxscny7j22e 2026-05-21 00:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmd6ie77xw2w...