CVE-2019-25442

Web Wiz Forums 12.01 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the PF parameter. Attackers can send GET requests to memberprofile.asp with malicious PF values to extract sensitive database information...

CVE-2019-25442 Web Wiz Forums 12.01 SQL Injection via PF Parameter

Web Wiz Forums 12.01 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the PF parameter. Attackers can send GET requests to memberprofile.asp with malicious PF values to extract sensitive database information...

CVE-2019-25442

CVE-2019-25442 affects Web Wiz Forums 12.01 and describes an SQL injection vulnerability in the PF parameter. The flaw allows unauthenticated attackers to manipulate database queries by injecting SQL code via PF values in GET requests to member_profile.asp, enabling extraction of sensitive data. ...

CVE-2026-25556

creationtimestamp| type| source ---|---|--- 2026-02-22 12:55:58+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mfh6qh6qa22o 2026-02-23 12:16:34+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mfjmyveiys2b 2026-02-23 12:47:31+00:00| seen|...

CVE-2026-27161

creationtimestamp| type| source ---|---|--- 2026-02-22 12:21:14+00:00| seen| https://bsky.app/profile/securitycipher.bsky.social/post/3mfh4sfhdin2d 2026-02-24 06:48:10+00:00| seen| https://t.me/poxek/5938 2026-09-01 20:00:13+00:00| seen| https://t.me/hackingAttack/180200 2026-09-01 20:00:13+00:00...

PT-2026-21432

Web Wiz Forums 12.01 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the PF parameter. Attackers can send GET requests to member profile.asp with malicious PF values to extract sensitive database informatio...

PT-2026-21450

Name of the Vulnerable Software and Affected Versions rymcu forest versions up to 0.0.5 Description A cross-site scripting issue exists in rymcu forest. The issue is located in the updateUserInfo function within the src/main/java/com/rymcu/forest/web/api/user/UserInfoController.java file of the...

CVE-2026-26981

creationtimestamp| type| source ---|---|--- 2026-02-21 21:21:04+00:00| published-proof-of-concept| https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-q6vj-wxvf-5m8c 2026-02-24 05:18:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mflg4oexck2e...

CVE-2026-2882

creationtimestamp| type| source ---|---|--- 2026-02-21 20:24:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mffhdfchj52v 2026-02-24 02:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfl2ztmeje22...

CVE-2026-27614

creationtimestamp| type| source ---|---|--- 2026-02-21 19:34:05+00:00| published-proof-of-concept| https://github.com/bugsink/bugsink/security/advisories/GHSA-vp6q-7m36-pq3w 2026-02-25 03:34:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfnqrfzvzp2s...

CVE-2026-27506

SVXportal version 2.5 and prior contain a stored cross-site scripting vulnerability in the user profile update workflow usersettings.php submitting to admin/updateuser.php. Authenticated users can store malicious HTML/JavaScript in fields such as Firstname, lastname, email, and imageurl, which ar...

CVE-2026-27464

creationtimestamp| type| source ---|---|--- 2026-02-21 08:17:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfe6q44i3n2n 2026-02-21 21:48:40+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mffm24k63l2n 2026-03-03 15:40:09+00:00| seen|...

CVE-2026-27196

creationtimestamp| type| source ---|---|--- 2026-02-21 05:21:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfduvo7ni32s 2026-03-30 23:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3micrc5qn3e2r...

Authorization Bypass

askbot is vulnerable to Authorization Bypass. The vulnerability is due to an incomplete permissions check, where an attacker authenticated with normal user permissions can modify the profile picture of other application users...

CVE-2026-2124

creationtimestamp| type| source ---|---|--- 2026-02-21 01:03:01+00:00| seen| https://bsky.app/profile/infosecbot.bsky.social/post/3mfdggpvvt72p...

CVE-2026-22383

creationtimestamp| type| source ---|---|--- 2026-02-21 00:45:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfdfi3gcfj2h...

CVE-2026-22380

creationtimestamp| type| source ---|---|--- 2026-02-21 00:45:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfdfgwcmni25 2026-02-21 00:45:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfdfhuwzpy2k 2026-02-21 00:47:59+00:00| seen|...

CVE-2026-2856

creationtimestamp| type| source ---|---|--- 2026-02-21 00:25:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfdedtayjy26 2026-02-24 04:20:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mflctxtdr22m...

CVE-2026-27169

creationtimestamp| type| source ---|---|--- 2026-02-21 00:17:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfddvp6qps2t 2026-02-21 00:18:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfddwqnowt2n 2026-02-23 22:20:09+00:00| seen|...

CVE-2026-27168

creationtimestamp| type| source ---|---|--- 2026-02-21 00:17:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfddvo54ng25 2026-02-21 00:18:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfddwj3bfn2h 2026-02-21 03:00:29+00:00| seen|...