23295 matches found
CVE-2018-25245
creationtimestamp| type| source ---|---|--- 2026-04-04 15:14:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miojl55m7n2o...
CVE-2016-20056
creationtimestamp| type| source ---|---|--- 2026-04-04 14:45:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miohynzb5p2i...
CVE-2018-25252
FTP Voyager 16.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by injecting oversized buffer data into the site profile IP field. Attackers can create a malicious site profile containing 500 bytes of repeated characters and paste it into the IP...
CVE-2018-25250
MyBB Last User's Threads in Profile Plugin 1.2 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts by crafting thread subjects with script tags. Attackers can create threads with script payloads in the subject field that execute when users...
CVE-2018-25252
The CVE-2018-25252 entry concerns FTP Voyager 16.2.0, where a denial-of-service condition arises from a buffer overflow caused by injecting oversized data into the site profile IP field. Attackers can craft a site profile containing about 500 bytes of repeated characters and paste it into the IP ...
CVE-2018-25252
FTP Voyager 16.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by injecting oversized buffer data into the site profile IP field. Attackers can create a malicious site profile containing 500 bytes of repeated characters and paste it into the IP...
CVE-2018-25252 FTP Voyager 16.2.0 Denial of Service via Malformed Site Profile
FTP Voyager 16.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by injecting oversized buffer data into the site profile IP field. Attackers can create a malicious site profile containing 500 bytes of repeated characters and paste it into the IP...
CVE-2018-25250
CVE-2018-25250 affects the MyBB plugin “Last User’s Threads in Profile” version 1.2. The issue is a persistent XSS vulnerability whereby an attacker can inject malicious scripts by supplying script tags in the subject field of new threads. When users visit the attacker's profile page, the payload...
CVE-2018-25250
MyBB Last User's Threads in Profile Plugin 1.2 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts by crafting thread subjects with script tags. Attackers can create threads with script payloads in the subject field that execute when users...
CVE-2018-25250 MyBB Last User's Threads in Profile Plugin 1.2 Persistent XSS
MyBB Last User's Threads in Profile Plugin 1.2 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts by crafting thread subjects with script tags. Attackers can create threads with script payloads in the subject field that execute when users...
CVE-2018-25250 MyBB Last User's Threads in Profile Plugin 1.2 Persistent XSS
MyBB Last User's Threads in Profile Plugin 1.2 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts by crafting thread subjects with script tags. Attackers can create threads with script payloads in the subject field that execute when users...
CVE-2018-25247
The CVE-2018-25247 entry concerns MyBB Like Plugin 3.0.0, which is vulnerable to cross-site scripting via user profiles. The root cause is unvalidated subject content in posts/threads, allowing an attacker to craft post subjects containing script tags that execute when other users view the attack...
CVE-2018-25247
MyBB Like Plugin 3.0.0 contains a stored cross-site scripting vulnerability. Authenticated attackers can inject script payloads into post or thread subjects; when other users view a profile that displays the attacker's liked posts, the unsanitized subject is rendered, executing the script in the...
CVE-2026-3309
creationtimestamp| type| source ---|---|--- 2026-04-04 12:23:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mio7zi75se2z 2026-04-11 00:30:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj6lgxzsza2m...
CVE-2025-14938
creationtimestamp| type| source ---|---|--- 2026-04-04 12:13:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mio7hlcn6c25 2026-04-11 01:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj6osceqvy2m 2026-04-11 01:30:08+00:00| seen|...
CVE-2026-3309 Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.16.11 - Unauthenticated Arbitrary Shortcode Execution via Checkout Billing Fields
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.16.11. This is due to the plugin allowing user-supplied billing fie...
CVE-2026-3445 Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.16.11 - Missing Authorization to Authenticated (Subscriber+) Membership Payment Bypass
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to unauthorized membership payment bypass in all versions up to, and including, 4.16.11. This is due to a missing ownership verification on...
CVE-2026-2600
creationtimestamp| type| source ---|---|--- 2026-04-04 08:24:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3minsou44wm2i 2026-04-10 18:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj5xdbusez2m 2026-04-20 19:00:15+00:00| published-proof-of-concept|...
CVE-2025-13368
creationtimestamp| type| source ---|---|--- 2026-04-04 08:06:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3minroks7g52s 2026-04-10 13:30:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj5gku5up72j...