CVE-2025-54049

creationtimestamp| type| source ---|---|--- 2026-05-24 18:00:14+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mmmk6dumfv2u...

CVE-2018-25354

Joomla Component jomres 9.11.2 contains a cross-site request forgery vulnerability that allows attackers to modify user account information by tricking authenticated users into visiting malicious pages. Attackers can craft HTML forms targeting the account/index endpoint with hidden fields to chan...

CVE-2018-25343

Smartshop 1 contains a cross-site request forgery vulnerability that allows attackers to modify user profiles by tricking authenticated users into submitting malicious requests. Attackers can craft HTML forms targeting editprofile.php with hidden fields for email and password parameters that...

CVE-2018-25354 Joomla Component jomres 9.11.2 Cross-Site Request Forgery

Joomla Component jomres 9.11.2 contains a cross-site request forgery vulnerability that allows attackers to modify user account information by tricking authenticated users into visiting malicious pages. Attackers can craft HTML forms targeting the account/index endpoint with hidden fields to chan...

CVE-2018-25354

Joomla Component jomres 9.11.2 contains a cross-site request forgery vulnerability that allows attackers to modify user account information by tricking authenticated users into visiting malicious pages. Attackers can craft HTML forms targeting the account/index endpoint with hidden fields to chan...

CVE-2018-25343

Smartshop 1 contains a cross-site request forgery vulnerability that allows attackers to modify user profiles by tricking authenticated users into submitting malicious requests. Attackers can craft HTML forms targeting editprofile.php with hidden fields for email and password parameters that...

CVE-2018-25343

Technical details for CVE-2018-25343 are not publicly available in the provided documents. Monitor for updates.

CVE-2018-25343 Smartshop 1 Cross-Site Request Forgery via editprofile.php

Smartshop 1 contains a cross-site request forgery vulnerability that allows attackers to modify user profiles by tricking authenticated users into submitting malicious requests. Attackers can craft HTML forms targeting editprofile.php with hidden fields for email and password parameters that...

EUVD-2018-21863

Smartshop 1 contains a cross-site request forgery vulnerability that allows attackers to modify user profiles by tricking authenticated users into submitting malicious requests. Attackers can craft HTML forms targeting editprofile.php with hidden fields for email and password parameters that...

CVE-2026-6898

creationtimestamp| type| source ---|---|--- 2026-05-23 06:51:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmiudlcyml2k 2026-06-06 11:02:52+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mnmivyrxak2z...

CVE-2026-35430

creationtimestamp| type| source ---|---|--- 2026-05-23 04:21:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmilu4cbmg2i 2026-05-27 23:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmumpujzgr2w...

Smartshop 跨站请求伪造漏洞

Smartshop is an e-commerce website development template created by Ismail Ghallou. Version 1 of Smartshop has a cross-site request forgeing vulnerability. This vulnerability stems from cross-site request forgery, allowing attackers to manipulate user profiles by tricking authenticated users into...

CVE-2026-6406

creationtimestamp| type| source ---|---|--- 2026-05-22 23:12:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmi2oefbjz2r 2026-05-29 20:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmzfbhtkvr2x...

CVE-2026-48700

creationtimestamp| type| source ---|---|--- 2026-05-22 23:07:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmi2fe6z5d2h 2026-05-24 21:10:32+00:00| seen| https://bsky.app/profile/matoken.inari.opencocon.org.ap.brid.gy/post/3mmmusivcvso2...

CVE-2026-9291

creationtimestamp| type| source ---|---|--- 2026-05-22 22:46:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmhzb23z742o...

CVE-2026-40597

creationtimestamp| type| source ---|---|--- 2026-05-22 22:24:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmhxykfjqe2i 2026-06-06 11:02:53+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mnmiw2dm4a2l...

CVE-2026-40172

creationtimestamp| type| source ---|---|--- 2026-05-22 22:14:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmhxh27ytq2n 2026-05-23 09:02:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116623077000235215 2026-05-25 18:27:14+00:00| seen|...

CVE-2026-40596

creationtimestamp| type| source ---|---|--- 2026-05-22 22:11:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmhxb7f6tf2c...

CVE-2026-39970

TypeBot is a chatbot builder tool. Versions 3.15.2 and prior contain a critical stored XSS vulnerability in the app.typebot.io profile picture upload form. The application fails to sanitize or restrict SVG/XML-based uploads and directly renders them when accessed through the domain. By uploading ...

CVE-2026-39970 TypeBot: Stored Cross-Site Scripting (XSS) via SVG File Upload On Profile Picture Form

TypeBot is a chatbot builder tool. Versions 3.15.2 and prior contain a critical stored XSS vulnerability in the app.typebot.io profile picture upload form. The application fails to sanitize or restrict SVG/XML-based uploads and directly renders them when accessed through the domain. By uploading ...