CVE-2026-24875

creationtimestamp| type| source ---|---|--- 2026-01-27 16:30:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdg6mjvqf52g 2026-01-27 19:11:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdghlpdarp2m...

CVE-2025-55102

creationtimestamp| type| source ---|---|--- 2026-01-27 16:18:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdg5x57d652n...

CVE-2020-36942

Victor CMS 1.0 contains a file upload vulnerability that allows authenticated users to upload malicious PHP files through the profile image upload feature. Attackers can upload a PHP shell to the /img directory and execute system commands by accessing the uploaded file via web browser...

CVE-2020-36942

Victor CMS 1.0 contains a file upload vulnerability that allows authenticated users to upload malicious PHP files through the profile image upload feature. Attackers can upload a PHP shell to the /img directory and execute system commands by accessing the uploaded file via web browser...

CVE-2020-36939

creationtimestamp| type| source ---|---|--- 2026-01-27 16:10:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdg5iqrn7k2h 2026-09-08 06:47:28+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/cassandrawebfileread.rb...

CVE-2026-24529

creationtimestamp| type| source ---|---|--- 2026-01-27 15:56:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdg4pctpgi27...

CVE-2020-36941

creationtimestamp| type| source ---|---|--- 2026-01-27 15:54:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdg4m2gfzm2c...

GHSA-R2JV-FWFR-4J8C askbot inexhaustive permissions check allows any user to modify a different user's profile picture

All versions of askbot before and including 0.12.2 allow an attacker authenticated with normal user permissions to modify the profile picture of other application users. This issue affects askbot: 0.12.2...

askbot inexhaustive permissions check allows any user to modify a different user's profile picture

All versions of askbot before and including 0.12.2 allow an attacker authenticated with normal user permissions to modify the profile picture of other application users. This issue affects askbot: 0.12.2...

CVE-2020-36942

Victor CMS 1.0 contains a file upload vulnerability that allows authenticated users to upload malicious PHP files through the profile image upload feature. Attackers can upload a PHP shell to the /img directory and execute system commands by accessing the uploaded file via web browser...

CVE-2020-36942 Victor CMS 1.0 - File Upload To RCE

Victor CMS 1.0 contains a file upload vulnerability that allows authenticated users to upload malicious PHP files through the profile image upload feature. Attackers can upload a PHP shell to the /img directory and execute system commands by accessing the uploaded file via web browser...

CVE-2020-36942 Victor CMS 1.0 - File Upload To RCE

Victor CMS 1.0 contains a file upload vulnerability that allows authenticated users to upload malicious PHP files through the profile image upload feature. Attackers can upload a PHP shell to the /img directory and execute system commands by accessing the uploaded file via web browser...

CVE-2020-36942

CVE-2020-36942 affects Victor CMS 1.0: authenticated users can upload PHP files via the profile image upload, enabling a PHP shell in the /img directory and browser-based command execution. The entry notes high impact to confidentiality, integrity, and availability. The documents do not provide a...

EUVD-2020-30860

Victor CMS 1.0 contains a file upload vulnerability that allows authenticated users to upload malicious PHP files through the profile image upload feature. Attackers can upload a PHP shell to the /img directory and execute system commands by accessing the uploaded file via web browser...

CVE-2026-1470

creationtimestamp| type| source ---|---|--- 2026-01-27 15:22:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdg2srtdrw2o 2026-01-27 16:23:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdg6a3n4jo2j 2026-01-28 11:43:00+00:00| seen|...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the adminorownerrequired function in avatarview.py. An attacker can alter other users' profile images by sending crafted requests while authenticated with standard user privileges...

CVE-2026-1213

All versions of askbot before and including 0.12.2 allow an attacker authenticated with normal user permissions to modify the profile picture of other application users.This issue affects askbot: 0.12.2...

CVE-2026-1213 Askbot 0.12.2 - Insecure Direct Object Reference (IDOR)

All versions of askbot before and including 0.12.2 allow an attacker authenticated with normal user permissions to modify the profile picture of other application users.This issue affects askbot: 0.12.2...

CVE-2026-1213 Askbot 0.12.2 - Insecure Direct Object Reference (IDOR)

All versions of askbot before and including 0.12.2 allow an attacker authenticated with normal user permissions to modify the profile picture of other application users.This issue affects askbot: 0.12.2...

EUVD-2026-4756

All versions of askbot before and including 0.12.2 allow an attacker authenticated with normal user permissions to modify the profile picture of other application users.This issue affects askbot: 0.12.2...