CVE-2024-55271

A Cross-Site Request Forgery CSRF vulnerability has been identified in phpgurukul Gym Management System 1.0. This issue is present in the profile update functionality of the User Panel, specifically the /profile.php endpoint...

CVE-2025-70151

code-projects Scholars Tracking System 1.0 allows an authenticated attacker to achieve remote code execution via unrestricted file upload. The endpoints updateprofilepicture.php and uploadpicture.php store uploaded files in a web-accessible uploads/ directory using the original, user-supplied...

CVE-2025-70151

code-projects Scholars Tracking System 1.0 allows an authenticated attacker to achieve remote code execution via unrestricted file upload. The endpoints updateprofilepicture.php and uploadpicture.php store uploaded files in a web-accessible uploads/ directory using the original, user-supplied...

CVE-2025-70151

code-projects Scholars Tracking System 1.0 allows an authenticated attacker to achieve remote code execution via unrestricted file upload. The endpoints updateprofilepicture.php and uploadpicture.php store uploaded files in a web-accessible uploads/ directory using the original, user-supplied...

PT-2026-20392

Improper Access Control IDOR in the Graylog API, version 2.2.3, which occurs when modifying the user ID in the URL. An authenticated user can access other user's profiles without proper authorization checks. Exploiting this vulnerability allows valid users of the system to be listed and sensitive...

CVE-2025-13689

creationtimestamp| type| source ---|---|--- 2026-02-17 23:19:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf3pbfo4za2h 2026-02-17 23:20:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf3pcn3ryx2v 2026-02-17 23:21:44+00:00| seen|...

CVE-2026-26119

creationtimestamp| type| source ---|---|--- 2026-02-17 23:19:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf3paxexzw25 2026-02-18 04:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mf4amzqrvw2n 2026-02-18 04:30:44+00:00| seen|...

CVE-2026-28446

creationtimestamp| type| source ---|---|--- 2026-02-17 21:36:34+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-4rj2-gpmh-qq5x 2026-03-06 12:01:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgfbblotk425 2026-03-06 18:36:12+00:00| seen|...

OpenClaw's unauthenticated Nostr profile HTTP endpoints allow remote profile/config tampering

Summary The OpenClaw Nostr channel plugin optional, disabled by default, installed separately exposes profile management HTTP endpoints under /api/channels/nostr/:accountId/profile GET/PUT and /api/channels/nostr/:accountId/profile/import POST. In affected versions, these routes were dispatched v...

Missing Authentication for Critical Function

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the HTTP endpoints for profile management. An attacker can read or modify sensitive profile information and persist unauthorized changes t...

GHSA-MV9J-6XHH-G383 OpenClaw's unauthenticated Nostr profile HTTP endpoints allow remote profile/config tampering

Summary The OpenClaw Nostr channel plugin optional, disabled by default, installed separately exposes profile management HTTP endpoints under /api/channels/nostr/:accountId/profile GET/PUT and /api/channels/nostr/:accountId/profile/import POST. In affected versions, these routes were dispatched v...

CVE-2025-61099

creationtimestamp| type| source ---|---|--- 2026-02-17 21:14:27+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mf3ib4fync2x...

CVE-2025-61100

creationtimestamp| type| source ---|---|--- 2026-02-17 21:14:27+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mf3ib4fync2x...

CVE-2025-67905

creationtimestamp| type| source ---|---|--- 2026-02-17 20:25:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf3fjjfroc2t...

CVE-2025-70828

creationtimestamp| type| source ---|---|--- 2026-02-17 17:34:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf33xeoe7x2h...

CVE-2024-55271

A Cross-Site Request Forgery CSRF vulnerability has been identified in phpgurukul Gym Management System 1.0. This issue is present in the profile update functionality of the User Panel, specifically the /profile.php endpoint...

CVE-2024-55271

A Cross-Site Request Forgery CSRF vulnerability has been identified in phpgurukul Gym Management System 1.0. This issue is present in the profile update functionality of the User Panel, specifically the /profile.php endpoint...

CVE-2025-70866

creationtimestamp| type| source ---|---|--- 2026-02-17 16:36:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf2yr2nknc2h...

CVE-2026-0929

creationtimestamp| type| source ---|---|--- 2026-02-17 16:13:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf2xhhdjxy2c 2026-02-17 16:13:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf2xhqm46e26...

CVE-2026-2474

creationtimestamp| type| source ---|---|--- 2026-02-17 16:02:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf2wtdnm322s 2026-03-04 13:04:51+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mgadvkho5s2r...