23307 matches found
CVE-2026-23651
creationtimestamp| type| source ---|---|--- 2026-03-06 01:57:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mge7kksikd2n 2026-03-10 16:57:37+00:00| seen| https://www.thezdi.com/blog/2026/3/10/the-march-2026-security-update-review 2026-03-10 19:15:41+00:00| seen|...
CVE-2026-26122
creationtimestamp| type| source ---|---|--- 2026-03-06 01:52:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mge7ayaqh52u 2026-03-10 16:57:37+00:00| seen| https://www.thezdi.com/blog/2026/3/10/the-march-2026-security-update-review 2026-03-10 19:15:41+00:00| seen|...
CVE-2025-47378
creationtimestamp| type| source ---|---|--- 2026-03-06 01:20:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mge5he3yph2l...
CVE-2026-27142
creationtimestamp| type| source ---|---|--- 2026-03-06 01:19:17+00:00| seen| https://bsky.app/profile/golang.org/post/3mge5fq5pq22k 2026-03-06 23:28:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgghp3nyzj2y 2026-03-07 12:01:22+00:00| seen|...
PT-2026-23760
The WP Frontend Profile plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.8. This is due to missing nonce validation on the 'update action' function. This makes it possible for unauthenticated attackers to approve or reject user account...
Tina4 Stack 跨站请求伪造漏洞
Tina4 Stack is a collection of full-site development frameworks provided by Tina4 Corporation. Version 1.0.3 of Tina4 Stack contains a cross-site request forgeing vulnerability. This vulnerability stems from a cross-site request forgeing issue with the profile endpoint, which may allow attackers ...
PT-2026-23696
Name of the Vulnerable Software and Affected Versions Tina4 Stack version 1.0.3 Description The software contains a cross-site request forgery issue that enables attackers to alter admin user credentials. This is achieved by submitting crafted POST requests to the /kim/profile endpoint. Attackers...
CVE-2026-28436
creationtimestamp| type| source ---|---|--- 2026-03-05 22:28:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgdtunnjmb2n...
CVE-2026-2593
creationtimestamp| type| source ---|---|--- 2026-03-05 22:15:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgdt5cqcrp2o...
EUVD-2026-9899
OpenClaw versions prior to 2026.2.12 with the optional Nostr plugin enabled expose unauthenticated HTTP endpoints at /api/channels/nostr/:accountId/profile and /api/channels/nostr/:accountId/profile/import that allow reading and modifying Nostr profiles without gateway authentication. Remote...
CVE-2026-28450 OpenClaw < 2026.2.12 - Unauthenticated Profile Tampering via Nostr Plugin HTTP Endpoints
OpenClaw versions prior to 2026.2.12 with the optional Nostr plugin enabled expose unauthenticated HTTP endpoints at /api/channels/nostr/:accountId/profile and /api/channels/nostr/:accountId/profile/import that allow reading and modifying Nostr profiles without gateway authentication. Remote...
CVE-2026-28450
OpenClaw, versions prior to 2026.2.12 with the optional Nostr plugin enabled, expose unauthenticated HTTP endpoints at /api/channels/nostr/:accountId/profile and /api/channels/nostr/:accountId/profile/import. These allow reading and modifying Nostr profiles without gateway authentication, potenti...
CVE-2026-30832
creationtimestamp| type| source ---|---|--- 2026-03-05 21:10:15+00:00| published-proof-of-concept| https://github.com/charmbracelet/soft-serve/security/advisories/GHSA-3fvx-xrxq-8jvv 2026-03-07 15:15:55+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-30832...
CVE-2026-28118
creationtimestamp| type| source ---|---|--- 2026-03-05 19:33:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgdk3oxtlt2h...
CVE-2026-3047
creationtimestamp| type| source ---|---|--- 2026-03-05 19:17:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgdj7gr3ex2s 2026-03-07 06:33:05+00:00| seen| https://bsky.app/profile/secqube.com/post/3mgh7ftcqq32t 2026-03-26 15:00:15+00:00| seen|...
CVE-2026-30798
creationtimestamp| type| source ---|---|--- 2026-03-05 18:48:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgdhl4ebkn27 2026-03-07 02:38:05+00:00| seen| https://bsky.app/profile/secqube.com/post/3mggsblxioo2y...
CVE-2025-70219
creationtimestamp| type| source ---|---|--- 2026-03-05 18:40:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgdh3tjiig2u 2026-03-05 18:40:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgdh4pxmpu2c...
CVE-2026-30797
creationtimestamp| type| source ---|---|--- 2026-03-05 18:38:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgdgz7h6hz2o...
CVE-2026-30827
creationtimestamp| type| source ---|---|--- 2026-03-05 16:40:55+00:00| published-proof-of-concept| https://github.com/express-rate-limit/express-rate-limit/security/advisories/GHSA-46wh-pxpv-q5gq 2026-03-07 08:07:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mghepfu7ud2...