40913 matches found
CVE-2026-4824
creationtimestamp| type| source ---|---|--- 2026-03-26 00:44:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwervgkyq2s...
CVE-2025-64648
creationtimestamp| type| source ---|---|--- 2026-03-26 00:30:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwdyaxye72d...
CVE-2026-33222
creationtimestamp| type| source ---|---|--- 2026-03-26 00:26:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwdrjyujh2d...
CVE-2025-36187
creationtimestamp| type| source ---|---|--- 2026-03-26 00:20:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwdg6wejo2d...
CVE-2026-2483
creationtimestamp| type| source ---|---|--- 2026-03-26 00:17:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwdbcjpbb22...
CVE-2026-2484
creationtimestamp| type| source ---|---|--- 2026-03-26 00:04:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwckpxssk2i...
CVE-2026-1014
creationtimestamp| type| source ---|---|--- 2026-03-26 00:02:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwchqbqmm25...
Tenda AC5 安全漏洞
Tenda AC5 is a wireless router produced by the Chinese company Tenda. Version 15.03.06.47 of Tenda AC5 contains a security vulnerability. This vulnerability stems from incorrect handling of parameters “PPPOEPassword” in the file/goform/QuickIndex component of the POST Request Handler, which may...
PT-2026-28246
OpenBiz Cubi Lite 3.0.8 contains a SQL injection vulnerability in the login form that allows unauthenticated attackers to manipulate database queries through the username parameter. Attackers can submit POST requests to /bin/controller.php with malicious SQL code in the username field to extract...
PT-2026-28669
Name of the Vulnerable Software and Affected Versions Tenda AC5 version 15.03.06.47 Description A flaw exists in the Tenda AC5 device. The issue is located within the decodePwd function of the /goform/WizardHandle file, part of the POST Request Handler component. Manipulating the WANT or WANS...
Unspecified vulnerability in Discourse (CNVD-2026-17265)
Discourse is Discourse open source set of open source community discussion platform. The platform includes features such as community , e-mail and chat rooms . Discourse suffers from a security vulnerability that can be exploited by an attacker to disclose restricted post action counts to...
Tenda AC5 安全漏洞
Tenda AC5 is a wireless router produced by the Chinese company Tenda. Version 15.03.06.47 of Tenda AC5 contains a security vulnerability. This vulnerability stems from incorrect handling of the parameter “page” in the file/goform/addressNat component’s POST Request Handler, which may lead to a...
PT-2026-28666
Name of the Vulnerable Software and Affected Versions Tenda AC5 version 15.03.06.47 Description A flaw exists in the function formQuickIndex located in the file /goform/QuickIndex within the POST Request Handler component. Manipulation of the PPPOEPassword argument can lead to a stack-based buffe...
Mattermost 安全漏洞
Mattermost is an open-source collaboration platform developed by the American company Mattermost. There is a security vulnerability in Mattermost, which stems from the failure to clean up post content controlled by users. This vulnerability could allow attackers to manipulate administrator...
PT-2026-28203
The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to unauthorized data loss in all versions up to, and including, 8.8.2. This is due to the resetSocialMetaTags function only verifying that the user has the 'read' capability and a valid b2s security nonce, both...
PT-2026-28665
Name of the Vulnerable Software and Affected Versions Tenda AC5 version 15.03.06.47 Description A flaw exists in the Tenda AC5 version 15.03.06.47 device. This issue is located within the POST Request Handler component, specifically in the fromAddressNat function of the /goform/addressNat file...
PT-2026-28193
The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to PHP Object Injection via deserialization of the 'post content' of admin form posts in all versions up to, and including, 3.28.31. This is due to the use of WordPress's maybe unserialize function without class restrictions on...
PT-2026-28245
qdPM 9.1 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through filter by parameters. Attackers can submit malicious POST requests to the timeReport endpoint with crafted filter byCommentCreatedFrom and filter...
CVE-2026-33722
creationtimestamp| type| source ---|---|--- 2026-03-25 22:09:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhw45lirag22 2026-03-26 03:00:16+00:00| seen| https://github.com/n8n-io/n8n/security/advisories/GHSA-58qr-rcgv-642v...
CVE-2026-33724
creationtimestamp| type| source ---|---|--- 2026-03-25 22:04:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhw3un2mne2j 2026-03-26 03:00:16+00:00| seen| https://github.com/n8n-io/n8n/security/advisories/GHSA-58qr-rcgv-642v 2026-03-27 21:22:34+00:00| seen|...