23092 matches found
CVE-2026-48613
SQL injection vulnerability in phpBB profile field migration due to improper handling of user-supplied profile field data during migration, allowing execution of arbitrary SQL queries. Only applies to phpBB forums that had been updated from versions prior to phpBB 3.3.8 and have not been updated ...
CVE-2026-46558
creationtimestamp| type| source ---|---|--- 2026-06-12 02:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mo2ph5flk72c 2026-07-16 19:00:30+00:00| seen| Telegram/cp2rVOV36WL3kV8x4ScnxuKP0fsnO5ojw1d2EB8ZtBxrfQ 2026-07-17 00:00:47+00:00| seen|...
CVE-2026-48613
SQL injection vulnerability in phpBB profile field migration due to improper handling of user-supplied profile field data during migration, allowing execution of arbitrary SQL queries. Only applies to phpBB forums that had been updated from versions prior to phpBB 3.3.8 and have not been updated ...
CVE-2026-48613
SQL injection vulnerability in phpBB profile field migration due to improper handling of user-supplied profile field data during migration, allowing execution of arbitrary SQL queries. Only applies to phpBB forums that had been updated from versions prior to phpBB 3.3.8 and have not been updated ...
EUVD-2026-36382
SQL injection vulnerability in phpBB profile field migration due to improper handling of user-supplied profile field data during migration, allowing execution of arbitrary SQL queries. Only applies to phpBB forums that had been updated from versions prior to phpBB 3.3.8 and have not been updated ...
CVE-2026-48613
Affects phpBB forums that were upgraded from versions prior to 3.3.8 and have not been updated to 3.3.11 or newer. The issue lies in the profile field migration process where user-supplied profile field data is not properly sanitized, allowing an SQL injection. The vulnerability enables execution...
CVE-2026-45171
creationtimestamp| type| source ---|---|--- 2026-06-12 01:49:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo2ms4pr2j2g...
CVE-2026-11849
creationtimestamp| type| source ---|---|--- 2026-06-12 01:11:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10972-32032-2.html 2026-06-12 12:00:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo3ovy7pxt2w 2026-06-12 13:16:58+00:00| seen|...
CVE-2026-44250
creationtimestamp| type| source ---|---|--- 2026-06-12 01:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo2k2oixus2w...
CVE-2026-11846
creationtimestamp| type| source ---|---|--- 2026-06-12 00:57:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10970-e4b21-2.html 2026-06-12 11:00:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo3ll2uhvd2u 2026-06-12 13:11:57+00:00| seen|...
PT-2026-48828
Name of the Vulnerable Software and Affected Versions phpBB versions prior to 3.3.11 Description An issue exists in the profile field migration process where user-supplied profile field data is handled improperly. This allows for the execution of arbitrary SQL queries, a technique known as SQL...
PT-2026-48878
Frappe is a full-stack web application framework. Prior to version 15.106.0, a stored XSS vulnerability in the user profile image section allows an attacker to execute malicious scripts in the browsers of other users. This issue has been patched in version 15.106.0...
PT-2026-48966
Name of the Vulnerable Software and Affected Versions MISP affected versions not specified Description An improper authorization issue allows an authenticated organization administrator to access or modify user settings of site administrator accounts within the same organization. This occurs...
PT-2026-49044
Name of the Vulnerable Software and Affected Versions Capgo versions prior to 12.128.2 Description The software fails to delete previously uploaded profile images from backend storage when users replace or remove them. This results in orphaned image files that can be accessed by attackers through...
CVE-2026-2827
creationtimestamp| type| source ---|---|--- 2026-06-11 23:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mo2e7qfedx2w...
CVE-2026-39494
creationtimestamp| type| source ---|---|--- 2026-06-11 23:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo2dehgvm22n 2026-06-12 01:22:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo2lbirsuf23 2026-06-12 09:00:31+00:00| seen|...
CVE-2026-49060
creationtimestamp| type| source ---|---|--- 2026-06-11 23:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo2deabi7m2b 2026-06-12 01:25:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo2lgfb72j2g...
CVE-2026-34693
creationtimestamp| type| source ---|---|--- 2026-06-11 22:23:20+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mo2bberyxr2g 2026-06-12 05:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mo2zizgsmd2y...