40347 matches found
FreeScout 安全漏洞
FreeScout is a lightweight and powerful free open-source help desk and shared inbox built using PHP Laravel framework by FreeScout Inc. Versions of FreeScout prior to 1.8.214 contained security vulnerabilities. These vulnerabilities stemmed from the fact that, under limited visibility, the...
WWBN AVideo 安全漏洞
WWBN AVideo is a video platform building system written in PHP, developed by the WWBN team. Versions of WWBN AVideo prior to 29.0 contained security vulnerabilities. These vulnerabilities stemmed from the locale/save.php file, which directly concatenated $POSTflag to construct the file path witho...
OpenClaw 安全漏洞
OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw prior to 2026.4.2 contained security vulnerabilities. These vulnerabilities stemmed from the lack of enforceable write limits on the POST /sessions/:sessionKey/kill endpoint, allowing callers...
Seeyon OA A8 代码问题漏洞
Seeyon OA A8 is a collaborative office management system developed by the Chinese company Seeyon. There is a code vulnerability in Seeyon OA A8. This vulnerability stems from an unauthenticated file writing operation at the /seeyon/htmlofficeservlet endpoint. This could allow a remote attacker to...
CVE-2026-5928
creationtimestamp| type| source ---|---|--- 2026-04-20 23:08:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxlks4q2l2k 2026-04-21 21:25:58+00:00| seen| Telegram/zqh64O-3jGBNpD02e4IDQ2Ua8XH6cA6PRqW3q0FpcVLnRBs...
CVE-2026-22051
creationtimestamp| type| source ---|---|--- 2026-04-20 23:03:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxlbto5sc2c 2026-04-22 12:45:31+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mk3jo4n4m62w...
CVE-2026-29648
creationtimestamp| type| source ---|---|--- 2026-04-20 22:43:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxk5zonx22p...
CVE-2026-32613
creationtimestamp| type| source ---|---|--- 2026-04-20 21:37:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjxgi64hg52n 2026-04-20 22:32:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxjjnzxor2k 2026-04-20 22:58:47+00:00| seen|...
CVE-2026-33626
creationtimestamp| type| source ---|---|--- 2026-04-20 21:37:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjxghobgwf2f 2026-04-20 22:15:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxilyimcp2c 2026-04-20 23:18:29+00:00| published-proof-of-concept|...
CVE-2026-33431
Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Prior to version 8.2.6.4, the POST /config//show API endpoint accepts a configver parameter that is directly appended to a base directory path to construct a local file path, which is subsequently opened and it...
CVE-2026-23753
creationtimestamp| type| source ---|---|--- 2026-04-20 20:03:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxb7df5gu2n...
CVE-2026-39109
creationtimestamp| type| source ---|---|--- 2026-04-20 20:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjxb2tnbmy2r...
CVE-2026-23752
creationtimestamp| type| source ---|---|--- 2026-04-20 19:58:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxawex4jp2h...
CVE-2026-23757
creationtimestamp| type| source ---|---|--- 2026-04-20 19:48:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxaei2ymu2p...
CVE-2026-23758
creationtimestamp| type| source ---|---|--- 2026-04-20 19:34:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjx7kvn6np2i...
EUVD-2026-23868
Vvveb prior to 1.0.8.1 contains a code injection vulnerability in the installation endpoint where the subdir POST parameter is written unsanitized into the env.php configuration file without escaping or validation. Attackers can inject arbitrary PHP code by breaking out of the string context in t...
CVE-2026-41445
creationtimestamp| type| source ---|---|--- 2026-04-20 18:29:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjx3wojlct2k 2026-04-20 18:46:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjx4wm5a4s2z 2026-04-20 21:22:08+00:00| seen|...
Exploit for CVE-2026-2600
CVE-2026-2600 ElementsKit Elementor Addons $item e...