23272 matches found
CVE-2026-6248
creationtimestamp| type| source ---|---|--- 2026-04-20 20:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjxb2ls3i62n 2026-04-20 21:22:08+00:00| seen| Telegram/afpqx5U4BmLApg0vDDGxSmW2u1LMTzTENI3LCYVeeaEOYCo...
CVE-2026-23756
creationtimestamp| type| source ---|---|--- 2026-04-20 19:38:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjx7sl7cmh2p...
CVE-2026-39111
creationtimestamp| type| source ---|---|--- 2026-04-20 18:40:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjx4knunme2c...
EUVD-2026-23850
Vvveb prior to 1.0.8.1 contains a privilege escalation vulnerability in the admin user profile save endpoint that allows authenticated users to modify privileged fields on their own profile. Attackers can inject roleid=1 into profile save requests to escalate to Super Administrator privileges,...
CVE-2026-6248 wpForo Forum <= 3.0.5 - Authenticated (Subscriber+) Arbitrary File Deletion via Custom Profile Field File Path
The wpForo Forum plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to and including 3.0.5. This is due to two compounding flaws: the Members::update method does not validate or restrict the value of file-type custom profile fields, allowing authenticated users to store ...
CVE-2026-6248
The CVE-2026-6248 entry concerns the wpForo Forum plugin for WordPress (versions up to 3.0.5) and describes an Arbitrary File Deletion vulnerability. Root cause: two flaws allow an authenticated user with subscriber-level access to delete arbitrary server files via a crafted file-type custom prof...
CVE-2026-6248 wpForo Forum <= 3.0.5 - Authenticated (Subscriber+) Arbitrary File Deletion via Custom Profile Field File Path
The wpForo Forum plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to and including 3.0.5. This is due to two compounding flaws: the Members::update method does not validate or restrict the value of file-type custom profile fields, allowing authenticated users to store ...
CVE-2026-3219
creationtimestamp| type| source ---|---|--- 2026-04-20 16:16:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjwukdmbem2p 2026-04-20 19:34:11+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mjx7l2ighx2h 2026-05-21 12:01:00+00:00| seen|...
CVE-2026-34427
Vvveb prior to 1.0.8.1 contains a privilege escalation vulnerability in the admin user profile save endpoint that allows authenticated users to modify privileged fields on their own profile. Attackers can inject roleid=1 into profile save requests to escalate to Super Administrator privileges,...
CVE-2026-39378
creationtimestamp| type| source ---|---|--- 2026-04-20 16:16:06+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-39378 2026-04-21 02:31:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxwvtauhz2r...
CVE-2026-39386
creationtimestamp| type| source ---|---|--- 2026-04-20 16:16:06+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-39386 2026-04-21 01:37:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjxttvn7zx2z 2026-04-21 03:03:57+00:00| seen|...
CVE-2026-39396
creationtimestamp| type| source ---|---|--- 2026-04-20 16:16:06+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-39396 2026-04-21 02:34:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxx2pmzd42h...
CVE-2026-34429
creationtimestamp| type| source ---|---|--- 2026-04-20 15:57:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjwtha6toy2e...
CVE-2026-30266
creationtimestamp| type| source ---|---|--- 2026-04-20 14:09:49+00:00| seen| https://t.me/bdufstecru/3092 2026-04-20 18:47:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjx4ycn7lz2r 2026-04-20 18:50:20+00:00| seen|...
CVE-2026-34427
Vvveb prior to 1.0.8.1 contains a privilege escalation vulnerability in the admin user profile save endpoint that allows authenticated users to modify privileged fields on their own profile. Attackers can inject roleid=1 into profile save requests to escalate to Super Administrator privileges,...
CVE-2026-34427 Vvveb < 1.0.8.1 Privilege Escalation via admin/user/save
Vvveb prior to 1.0.8.1 contains a privilege escalation vulnerability in the admin user profile save endpoint that allows authenticated users to modify privileged fields on their own profile. Attackers can inject roleid=1 into profile save requests to escalate to Super Administrator privileges,...
CVE-2026-34427 Vvveb < 1.0.8.1 Privilege Escalation via admin/user/save
Vvveb prior to 1.0.8.1 contains a privilege escalation vulnerability in the admin user profile save endpoint that allows authenticated users to modify privileged fields on their own profile. Attackers can inject roleid=1 into profile save requests to escalate to Super Administrator privileges,...
CVE-2026-34427 Vvveb < 1.0.8.1 Privilege Escalation via admin/user/save
Vvveb prior to 1.0.8.1 contains a privilege escalation vulnerability in the admin user profile save endpoint that allows authenticated users to modify privileged fields on their own profile. Attackers can inject roleid=1 into profile save requests to escalate to Super Administrator privileges,...
EUVD-2026-23814
A security flaw has been discovered in BichitroGan ISP Billing Software 2025.3.20. This impacts an unknown function of the file /?route=settings/users-view/ of the component Profile Page Handler. Performing a manipulation results in cross site scripting. The attack is possible to be carried out...