CVE-2026-23493

creationtimestamp| type| source ---|---|--- 2026-01-15 17:43:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mci537dtkx2u 2026-01-15 17:43:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mci53xg3ti2g 2026-01-15 18:07:30+00:00| seen|...

CVE-2021-47772

creationtimestamp| type| source ---|---|--- 2026-01-15 17:34:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mci4lhjtai2c...

CVE-2021-47819

ProjeQtOr Project Management 9.1.4 contains a file upload vulnerability that allows guest users to upload malicious PHP files with arbitrary code execution capabilities. Attackers can upload a PHP script through the profile attachment section and execute system commands by accessing the uploaded...

CVE-2021-47754

Arunna 1.0.0 contains a cross-site request forgery vulnerability that allows attackers to manipulate user profile settings without authentication. Attackers can craft a malicious form to change user details, including passwords, email, and administrative privileges by tricking authenticated users...

CVE-2021-47754

Arunna 1.0.0 contains a cross-site request forgery vulnerability that allows attackers to manipulate user profile settings without authentication. Attackers can craft a malicious form to change user details, including passwords, email, and administrative privileges by tricking authenticated users...

CVE-2021-47819

ProjeQtOr Project Management 9.1.4 contains a file upload vulnerability that allows guest users to upload malicious PHP files with arbitrary code execution capabilities. Attackers can upload a PHP script through the profile attachment section and execute system commands by accessing the uploaded...

CVE-2021-47819 ProjeQtOr Project Management 9.1.4 - Remote Code Execution

ProjeQtOr Project Management 9.1.4 contains a file upload vulnerability that allows guest users to upload malicious PHP files with arbitrary code execution capabilities. Attackers can upload a PHP script through the profile attachment section and execute system commands by accessing the uploaded...

CVE-2021-47819 ProjeQtOr Project Management 9.1.4 - Remote Code Execution

ProjeQtOr Project Management 9.1.4 contains a file upload vulnerability that allows guest users to upload malicious PHP files with arbitrary code execution capabilities. Attackers can upload a PHP script through the profile attachment section and execute system commands by accessing the uploaded...

EUVD-2026-2750

ProjeQtOr Project Management 9.1.4 contains a file upload vulnerability that allows guest users to upload malicious PHP files with arbitrary code execution capabilities. Attackers can upload a PHP script through the profile attachment section and execute system commands by accessing the uploaded...

EUVD-2026-2780

Arunna 1.0.0 contains a cross-site request forgery vulnerability that allows attackers to manipulate user profile settings without authentication. Attackers can craft a malicious form to change user details, including passwords, email, and administrative privileges by tricking authenticated users...

CVE-2021-47754 Arunna 1.0.0 - 'Multiple' Cross-Site Request Forgery (CSRF)

Arunna 1.0.0 contains a cross-site request forgery vulnerability that allows attackers to manipulate user profile settings without authentication. Attackers can craft a malicious form to change user details, including passwords, email, and administrative privileges by tricking authenticated users...

CVE-2021-47754

Arunna 1.0.0 contains a cross-site request forgery vulnerability that allows attackers to manipulate user profile settings without authentication. Attackers can craft a malicious form to change user details, including passwords, email, and administrative privileges by tricking authenticated users...

CVE-2021-47754 Arunna 1.0.0 - 'Multiple' Cross-Site Request Forgery (CSRF)

Arunna 1.0.0 contains a cross-site request forgery vulnerability that allows attackers to manipulate user profile settings without authentication. Attackers can craft a malicious form to change user details, including passwords, email, and administrative privileges by tricking authenticated users...

CVE-2025-67081

An SQL injection vulnerability in Itflow through 25.06 has been identified in the "roleid" parameter when editing a profile. An attacker with admin account can exploit this issue via blind SQL injection, allowing for the extraction of arbitrary data from the database. The vulnerability arises fro...

CVE-2025-13062

creationtimestamp| type| source ---|---|--- 2026-01-15 14:43:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mchsznpigd2g 2026-01-15 14:43:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcht2hipda2e...

CVE-2026-22797

creationtimestamp| type| source ---|---|--- 2026-01-15 14:35:11+00:00| seen| https://seclists.org/oss-sec/2026/q1/66 2026-01-15 16:02:51+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mchxhpcfl624 2026-01-16 06:40:46+00:00| seen| https://seclists.org/oss-sec/2026/q1/74 2026-01-...

CVE-2026-22916

creationtimestamp| type| source ---|---|--- 2026-01-15 14:28:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mchs6u4i5h2x 2026-01-15 15:12:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115899757567671679...

CVE-2026-22911

creationtimestamp| type| source ---|---|--- 2026-01-15 13:52:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mchq5qce632e 2026-01-15 15:12:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115899757567671679...

CVE-2026-22917

creationtimestamp| type| source ---|---|--- 2026-01-15 13:49:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mchpyecnma2c 2026-01-15 15:12:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115899757567671679...

CVE-2026-22914

creationtimestamp| type| source ---|---|--- 2026-01-15 13:43:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mchpoyldxe2g 2026-01-15 15:12:36+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115899757567671679...