CVE-2026-27606

creationtimestamp| type| source ---|---|--- 2026-02-23 19:59:38+00:00| published-proof-of-concept| https://github.com/rollup/rollup/security/advisories/GHSA-mw96-cpmx-2vgc 2026-02-25 18:12:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfpbtpplw52s 2026-02-26...

CVE-2026-2947

A vulnerability was detected in rymcu forest up to 0.0.5. This affects the function updateUserInfo of the file - src/main/java/com/rymcu/forest/web/api/user/UserInfoController.java of the component User Profile Handler. The manipulation results in cross site scripting. The attack can be executed...

CVE-2026-26325

creationtimestamp| type| source ---|---|--- 2026-02-23 15:00:16+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfjw5p33lq2m...

CERTFR-2026-ACT-008

creationtimestamp| type| source ---|---|--- 2026-02-23 14:04:04+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116120318282447958 2026-02-23 14:04:06+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mfjsz6k6gz2k...

CVE-2019-25442

Web Wiz Forums 12.01 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the PF parameter. Attackers can send GET requests to memberprofile.asp with malicious PF values to extract sensitive database information...

WordPress Profile Builder Pro plugin <= 3.13.9 - SQL Injection vulnerability

SQL Injection vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Profile Builder Pro versions = 3.13.9...

CVE-2026-27461

creationtimestamp| type| source ---|---|--- 2026-02-23 09:10:51+00:00| published-proof-of-concept| https://github.com/pimcore/pimcore/security/advisories/GHSA-vxg3-v4p6-f3fp 2026-02-24 05:32:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mflgv2iel42n 2026-02-25 05:40:18+00:00|...

WordPress Easy Author Image plugin <= 1.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Picture URL vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting via Profile Picture URL vulnerability discovered by Nabil Irawan - Heroes Cyber Security in WordPress Plugin Easy Author Image versions = 1.7...

CVE-2026-27586

creationtimestamp| type| source ---|---|--- 2026-02-23 04:24:19+00:00| published-proof-of-concept| https://github.com/caddyserver/caddy/security/advisories/GHSA-hffm-g8v7-wrv7 2026-02-24 21:12:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfn3g52qfd2e 2026-02-25 01:08:03+00:00|...

CVE-2026-2961

creationtimestamp| type| source ---|---|--- 2026-02-23 01:18:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfiiamrbzf26 2026-02-23 01:19:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfiicgh6n325 2026-02-23 06:00:37+00:00| seen|...

CVE-2026-27597

creationtimestamp| type| source ---|---|--- 2026-02-22 21:10:36+00:00| published-proof-of-concept| https://github.com/agentfront/enclave/security/advisories/GHSA-f229-3862-4942 2026-02-25 04:18:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfnt77pasz2c 2026-02-25...

CVE-2019-25391

creationtimestamp| type| source ---|---|--- 2026-02-22 16:22:04+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mfhkb2dezo2b...

CVE-2026-2947

A vulnerability was detected in rymcu forest up to 0.0.5. This affects the function updateUserInfo of the file - src/main/java/com/rymcu/forest/web/api/user/UserInfoController.java of the component User Profile Handler. The manipulation results in cross site scripting. The attack can be executed...

CVE-2026-2947

A vulnerability was detected in rymcu forest up to 0.0.5. This affects the function updateUserInfo of the file - src/main/java/com/rymcu/forest/web/api/user/UserInfoController.java of the component User Profile Handler. The manipulation results in cross site scripting. The attack can be executed...

CVE-2019-25442

Web Wiz Forums 12.01 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the PF parameter. Attackers can send GET requests to memberprofile.asp with malicious PF values to extract sensitive database information...

CVE-2026-2938

creationtimestamp| type| source ---|---|--- 2026-02-22 14:04:13+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mfhckk5kmu2x 2026-02-24 06:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mflkodeigw2l...

CVE-2026-26198

creationtimestamp| type| source ---|---|--- 2026-02-22 13:53:29+00:00| published-proof-of-concept| https://github.com/ormar-orm/ormar/security/advisories/GHSA-xxh2-68g9-8jqr 2026-02-24 04:00:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mflbqlowoi26 2026-02-24...

CVE-2026-2947

A vulnerability was detected in rymcu forest up to 0.0.5. This affects the function updateUserInfo of the file - src/main/java/com/rymcu/forest/web/api/user/UserInfoController.java of the component User Profile Handler. The manipulation results in cross site scripting. The attack can be executed...

CVE-2026-2947 rymcu forest User Profile UserInfoController.java updateUserInfo cross site scripting

A vulnerability was detected in rymcu forest up to 0.0.5. This affects the function updateUserInfo of the file - src/main/java/com/rymcu/forest/web/api/user/UserInfoController.java of the component User Profile Handler. The manipulation results in cross site scripting. The attack can be executed...

CVE-2019-25442 Web Wiz Forums 12.01 SQL Injection via PF Parameter

Web Wiz Forums 12.01 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the PF parameter. Attackers can send GET requests to memberprofile.asp with malicious PF values to extract sensitive database information...