40393 matches found
CVE-2019-25704
creationtimestamp| type| source ---|---|--- 2026-04-06 00:11:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miry2g55jk27 2026-04-08 00:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3miwyetald32c...
PT-2026-30694
Chyrp Lite is an ultra-lightweight blogging engine. Prior to 2026.01, an IDOR / Mass Assignment issue exists in the Post model that allows authenticated users with post editing permissions Edit Post, Edit Draft, Edit Own Post, Edit Own Draft to modify posts they do not own and do not have...
chyrp-lite 安全漏洞
Chyrp-Lite is a self-hosted blog and website platform developed by Daniel Pimley. Versions of Chyrp-Lite prior to version 2026.01 contained security vulnerabilities. These vulnerabilities stemmed from insecure direct object references or bulk assignment issues in the Post model, which could lead ...
goshs 路径遍历漏洞
Goshs is a simple HTTP server developed by Patrick Hener using Go language. Versions of Goshs prior to 2.0.0-beta.3 contained a path traversal vulnerability. This vulnerability stemmed from the lack of cleaning up POST multipart upload directories, which could lead to path traversal attacks...
CVE-2019-25685
creationtimestamp| type| source ---|---|--- 2026-04-05 23:38:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mirwait4tn2i...
CVE-2019-25690
creationtimestamp| type| source ---|---|--- 2026-04-05 23:31:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mirvu23h4i22...
EUVD-2019-20083
CMSsite 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'post' parameter. Attackers can send GET requests to post.php with malicious 'post' values to extract sensitive database information or perfor...
EUVD-2019-20073
qdPM 9.1 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the searchbyextrafields parameter. Attackers can send POST requests to the users endpoint with malicious searchbyextrafields values to trigger SQL syntax errors and...
CVE-2019-25674
CMSsite 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'post' parameter. Attackers can send GET requests to post.php with malicious 'post' values to extract sensitive database information or perfor...
CVE-2019-25674 CMSsite 1.0 SQL Injection via post Parameter
CMSsite 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'post' parameter. Attackers can send GET requests to post.php with malicious 'post' values to extract sensitive database information or perfor...
CVE-2019-25674
CMSsite 1.0 is affected by an SQL injection vulnerability in the post parameter that can be exploited via GET requests to post.php. The vulnerability allows unauthenticated attackers to manipulate database queries, potentially extracting sensitive data or performing time-based blind SQL injection...
CVE-2019-25674
CMSsite 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'post' parameter. Attackers can send GET requests to post.php with malicious 'post' values to extract sensitive database information or perfor...
CVE-2019-25674 CMSsite 1.0 SQL Injection via post Parameter
CMSsite 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'post' parameter. Attackers can send GET requests to post.php with malicious 'post' values to extract sensitive database information or perfor...
CVE-2026-29923
creationtimestamp| type| source ---|---|--- 2026-04-05 20:00:04+00:00| seen| https://t.me/GithubRedTeam/78979 2026-04-10 13:00:04+00:00| seen| https://t.me/GithubRedTeam/79738 2026-04-10 21:03:04+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mj67urmbr52z 2026-04-13...
CVE-2026-5580
creationtimestamp| type| source ---|---|--- 2026-04-05 19:45:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mirj7ze5bb27...
CVE-2026-5594
creationtimestamp| type| source ---|---|--- 2026-04-05 19:26:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miri5d7udk2s...
CVE-2026-5573
creationtimestamp| type| source ---|---|--- 2026-04-05 16:38:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mir6qihh6j2g 2026-04-05 17:15:47+00:00| published-proof-of-concept| Telegram/gzCKNObz4im4uV-yc9tEdz-C82sp4ablGsaOO-Gqtulpb0...
CVE-2026-5571
creationtimestamp| type| source ---|---|--- 2026-04-05 16:28:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mir66lle5k23...
CVE-2026-5599
creationtimestamp| type| source ---|---|--- 2026-04-05 15:16:27+00:00| published-proof-of-concept| Telegram/bba5KoRxZjw4aUqHfMWZuI7ux2762ZWKOY2q9V8MiGPKQ0 2026-04-05 15:55:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mir4f2ag5j2j...