23327 matches found
E-commerce 代码问题漏洞
E-commerce is a dynamic e-commerce website developed by Bhabishya Ghimire as an individual developer. Version 1.0.0 of E-commerce has code-related vulnerabilities; these vulnerabilities stem from incorrect handling of parameters in the file /seller/assets/backend/profile/addadhar.php, which may...
WordPress plugin JAY Login & Register 安全漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...
CVE-2026-24050
Zulip is an open-source team collaboration tool. From 5.0 to before 11.5, some administrative actions on the user profile were susceptible to stored XSS in group names or channel names. Exploiting these vulnerabilities required the user explicitly interacting with the problematic object. This...
CVE-2026-25762
creationtimestamp| type| source ---|---|--- 2026-02-06 23:22:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mea2bjntwk27 2026-02-08 00:40:06+00:00| seen| https://gist.github.com/alon710/e2cbb4e3c7fdeb40d051c3d7c45483a1...
CVE-2026-25791
creationtimestamp| type| source ---|---|--- 2026-02-06 22:41:59+00:00| published-proof-of-concept| https://github.com/BishopFox/sliver/security/advisories/GHSA-wxrw-gvg8-fqjp 2026-02-09 21:20:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meheu7qmj72g 2026-02-09...
CVE-2026-25580
creationtimestamp| type| source ---|---|--- 2026-02-06 21:21:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me7tjcsu6c23 2026-02-06 21:21:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me7tjzobmb27 2026-02-06 21:57:38+00:00| seen|...
CVE-2026-25636
creationtimestamp| type| source ---|---|--- 2026-02-06 21:21:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me7tj3g3vd2g 2026-02-06 21:21:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me7tjss2l223 2026-02-06 21:57:30+00:00| seen|...
CVE-2026-25635
creationtimestamp| type| source ---|---|--- 2026-02-06 21:21:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me7tiv42a624 2026-02-06 21:21:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me7tjlp4xm2g 2026-02-06 21:57:23+00:00| seen|...
CVE-2026-25731
creationtimestamp| type| source ---|---|--- 2026-02-06 21:18:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me7tdkl3am2g 2026-02-06 21:18:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me7tekx5wb2x 2026-02-15 17:06:53+00:00| seen|...
CVE-2020-37148
creationtimestamp| type| source ---|---|--- 2026-02-06 21:02:55+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3me7siikpxs2c...
EUVD-2026-5578
iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to 2.3.1.4, SrcPixel and DestPixel stack buffers overlap in CIccTagMultiProcessElement::Apply int IccTagMPE.cpp. This vulnerability is fixed in 2.3.1....
CVE-2026-25643
creationtimestamp| type| source ---|---|--- 2026-02-06 20:17:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me7pxyllun25 2026-02-06 20:18:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me7pz64gzu2v 2026-02-06 20:19:21+00:00| seen|...
CVE-2025-70963
creationtimestamp| type| source ---|---|--- 2026-02-06 19:16:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me7mkurnak2h...
CVE-2026-24050 Zulip affected by Stored XSS in user profile modal
Zulip is an open-source team collaboration tool. From 5.0 to before 11.5, some administrative actions on the user profile were susceptible to stored XSS in group names or channel names. Exploiting these vulnerabilities required the user explicitly interacting with the problematic object. This...
CVE-2026-24050
Zulip (open-source team collaboration tool) is affected by a stored XSS issue in administrative actions on user profiles in group names and channel names, across Zulip server versions 5.0 up to, but not including, 11.5. The vulnerability requires user interaction with the problematic object and i...
CVE-2026-24050 Zulip affected by Stored XSS in user profile modal
Zulip is an open-source team collaboration tool. From 5.0 to before 11.5, some administrative actions on the user profile were susceptible to stored XSS in group names or channel names. Exploiting these vulnerabilities required the user explicitly interacting with the problematic object. This...
EUVD-2026-5640
Zulip is an open-source team collaboration tool. From 5.0 to before 11.5, some administrative actions on the user profile were susceptible to stored XSS in group names or channel names. Exploiting these vulnerabilities required the user explicitly interacting with the problematic object. This...
CVE-2026-24050 Zulip affected by Stored XSS in user profile modal
Zulip is an open-source team collaboration tool. From 5.0 to before 11.5, some administrative actions on the user profile were susceptible to stored XSS in group names or channel names. Exploiting these vulnerabilities required the user explicitly interacting with the problematic object. This...
CVE-2025-69214
creationtimestamp| type| source ---|---|--- 2026-02-06 16:48:32+00:00| published-proof-of-concept| https://github.com/devcode-it/openstamanager/security/advisories/GHSA-qjv8-63xq-gq8m 2026-02-09 22:53:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mehk3kkgor27...