40327 matches found
CVE-2026-7418
creationtimestamp| type| source ---|---|--- 2026-04-29 23:00:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mko7cbhulp2t 2026-04-30 00:26:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkoe37qfku2o...
CVE-2018-25313
creationtimestamp| type| source ---|---|--- 2026-04-29 20:49:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknxy4kmgc2v...
CVE-2026-34965
creationtimestamp| type| source ---|---|--- 2026-04-29 20:45:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknxrf2bsf2v 2026-04-29 21:19:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknzoer7es2k 2026-04-29 23:01:55+00:00| seen|...
CVE-2018-25308
BuddyPress Xprofile Custom Fields Type 2.6.3 contains a remote code execution vulnerability that allows authenticated users to delete arbitrary files by manipulating unescaped POST parameters. Attackers can modify the fieldhiddenfile and fielddeleteimg parameters during profile editing to unlink...
CVE-2026-41409
creationtimestamp| type| source ---|---|--- 2026-04-29 20:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mknvm7v3uf2w 2026-05-01 01:27:07+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mkqxxdbwbc2e 2026-05-01 10:26:32+00:00| seen|...
CVE-2018-25308 BuddyPress Xprofile Custom Fields Type 2.6.3 Arbitrary File Deletion
BuddyPress Xprofile Custom Fields Type 2.6.3 contains a remote code execution vulnerability that allows authenticated users to delete arbitrary files by manipulating unescaped POST parameters. Attackers can modify the fieldhiddenfile and fielddeleteimg parameters during profile editing to unlink...
CVE-2018-25308
Affected product: BuddyPress Xprofile Custom Fields Type 2.6.3. Vulnerability: remote code execution via unescaped POST parameters during profile editing, enabling authenticated users to delete arbitrary files by manipulating field_hiddenfile and field_deleteimg. Impact: high impact on confidenti...
CVE-2018-25298 Merge PACS 7.0 Cross-Site Request Forgery via merge-viewer
Merge PACS 7.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions by crafting malicious HTML forms targeting the merge-viewer endpoint. Attackers can submit POST requests to /servlet/actions/merge-viewer/summary with login credentials to hija...
CVE-2026-5712
creationtimestamp| type| source ---|---|--- 2026-04-29 19:01:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mknrwqq5hv2t 2026-05-05 14:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3ml4ebzet3f2o...
CVE-2026-42198
creationtimestamp| type| source ---|---|--- 2026-04-29 18:45:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknr2ukb6c2e 2026-04-30 20:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqfpeooje26 2026-04-30 21:00:30+00:00| seen|...
CVE-2026-7439 AgentFlow Local Web API Content-Type Validation Bypass
AgentFlow's local web API accepts non-JSON content types on POST /api/runs and POST /api/runs/validate endpoints without enforcing application/json validation, allowing attackers to bypass trust-boundary enforcement on sensitive operations. Attackers can exploit this content-type validation...
CVE-2026-0205
A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services...
CVE-2026-0206
A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall...
CVE-2026-0206
A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall...
EUVD-2026-26256
A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall...
CVE-2026-0206
A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall...
CVE-2026-0206
A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall...
CVE-2026-0206
The CVE describes a post-authentication stack-based buffer overflow in SonicOS that allows a remote attacker to crash a firewall. Affected component: SonicOS (firewall platform). Root cause: stack-based overflow after authentication. Impact: denial of service via crash; no confidentiality/integri...