23333 matches found
CVE-2026-22044
creationtimestamp| type| source ---|---|--- 2026-02-04 14:50:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3me24q3czij23...
CVE-2026-25160
creationtimestamp| type| source ---|---|--- 2026-02-04 11:05:07+00:00| published-proof-of-concept| https://github.com/AlistGo/alist/security/advisories/GHSA-8jmm-3xwx-w974 2026-02-04 20:22:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2pbvf6lr27 2026-02-04...
CVE-2025-15285
creationtimestamp| type| source ---|---|--- 2026-02-04 09:17:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdzk5ekgml25...
CVE-2025-15268
creationtimestamp| type| source ---|---|--- 2026-02-04 09:17:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdzk56b4x62g...
CVE-2025-627288
creationtimestamp| type| source ---|---|--- 2026-02-04 08:13:49+00:00| seen| https://bsky.app/profile/jasonelkin.uk/post/3mdzglfcd4k2j...
UNA CMS <= 14.0.0-RC4 - PHP Object Injection
The vulnerability is located in the /template/scripts/BxBaseMenuSetAclLevel.php script. Specifically, within the BxBaseMenuSetAclLevel::getCode method. When calling this method, user input passed through the "profileid" POST parameter is not properly sanitized before being used in a call to the...
PT-2026-6330
Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.3 Description iccDEV is a set of libraries and tools for interacting with ICC color management profiles. A flaw exists in the color management module due to improper array bounds validation when processing ICC...
CVE-2020-37084
School ERP Pro 1.0 contains a remote code execution vulnerability that allows authenticated admin users to upload arbitrary PHP files as profile photos by bypassing file extension checks. Attackers can exploit improper file validation in pre-editstudent.inc.php to execute arbitrary code on the...
CVE-2020-37084
School ERP Pro 1.0 contains a remote code execution vulnerability that allows authenticated admin users to upload arbitrary PHP files as profile photos by bypassing file extension checks. Attackers can exploit improper file validation in pre-editstudent.inc.php to execute arbitrary code on the...
CVE-2026-25150
creationtimestamp| type| source ---|---|--- 2026-02-03 22:20:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdyfft5tm62h...
CVE-2026-25510
creationtimestamp| type| source ---|---|--- 2026-02-03 22:19:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdyff2joet2g 2026-08-29 20:00:22+00:00| seen| https://t.me/CyberDispatch/653 2026-08-30 00:00:48+00:00| seen| https://t.me/CyberDispatch/653 2026-08-31...
CVE-2020-37084
School ERP Pro 1.0 contains a remote code execution vulnerability that allows authenticated admin users to upload arbitrary PHP files as profile photos by bypassing file extension checks. Attackers can exploit improper file validation in pre-editstudent.inc.php to execute arbitrary code on the...
CVE-2020-37084 School ERP Pro 1.0 Admin Profile Photo Upload Remote Code Execution Vulnerability
School ERP Pro 1.0 contains a remote code execution vulnerability that allows authenticated admin users to upload arbitrary PHP files as profile photos by bypassing file extension checks. Attackers can exploit improper file validation in pre-editstudent.inc.php to execute arbitrary code on the...
CVE-2020-37084
CVE-2020-37084 affects School ERP Pro 1.0. An authenticated administrator can upload arbitrary PHP files as profile photos by bypassing file extension checks, via improper validation in pre-editstudent.inc.php, enabling remote code execution on the server. The vulnerability is tied to the admin p...
CVE-2020-37084 School ERP Pro 1.0 Admin Profile Photo Upload Remote Code Execution Vulnerability
School ERP Pro 1.0 contains a remote code execution vulnerability that allows authenticated admin users to upload arbitrary PHP files as profile photos by bypassing file extension checks. Attackers can exploit improper file validation in pre-editstudent.inc.php to execute arbitrary code on the...
CVE-2026-24954
creationtimestamp| type| source ---|---|--- 2026-02-03 19:20:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdy3f6vls42m 2026-08-29 20:00:22+00:00| seen| https://t.me/CyberDispatch/655 2026-08-30 00:00:48+00:00| seen| https://t.me/CyberDispatch/655 2026-08-31...
EUVD-2026-5192
iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, type confusion allowed malformed ICC profiles to trigger undefined behavior when loading invalid icImageEncodingType values causin...
CVE-2026-24665
creationtimestamp| type| source ---|---|--- 2026-02-03 18:22:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdxy45jryx23 2026-08-29 20:00:22+00:00| seen| https://t.me/CyberDispatch/658 2026-08-30 00:00:48+00:00| seen| https://t.me/CyberDispatch/658 2026-08-31...
CVE-2026-24672
The Open eClass platform formerly known as GUnet eClass is a complete course management system. Prior to version 4.2, a Stored Cross-Site Scripting XSS vulnerability allows authenticated students to inject malicious JavaScript into user profile fields, which is executed when users with viewing...