23394 matches found
PT-2026-2982
Name of the Vulnerable Software and Affected Versions WP-Members Membership Plugin versions up to and including 3.5.4.3 Description The WP-Members Membership Plugin for WordPress is susceptible to Stored Cross-Site Scripting through the Multiple Checkbox and Multiple Select user profile fields...
CVE-2025-67081
An SQL injection vulnerability in Itflow through 25.06 has been identified in the "roleid" parameter when editing a profile. An attacker with admin account can exploit this issue via blind SQL injection, allowing for the extraction of arbitrary data from the database. The vulnerability arises fro...
Altium 365 security vulnerabilities
Altium 365 is a product design and development platform provided by the American company Altium. There is a security vulnerability in Altium 365, which stems from insufficient server-side cleaning of input data in the user profile text field. This vulnerability may lead to storage-side cross-site...
PHPGurukul Cyber Cafe Management System 安全漏洞
Cyber Cafe Management System is an internet cafe management system. Cyber Cafe Management System suffers from a SQL injection vulnerability that stems from the adminprofile.php endpoint's adminname parameter not being sufficiently cleaned of user input, no details of the vulnerability are availab...
CVE-2025-67081
An SQL injection vulnerability in Itflow through 25.06 has been identified in the "roleid" parameter when editing a profile. An attacker with admin account can exploit this issue via blind SQL injection, allowing for the extraction of arbitrary data from the database. The vulnerability arises fro...
Arunna security vulnerabilities
Arunna is a social media framework developed by Arunna’s individual developer. Version 1.0.0 of Arunna contains security vulnerabilities; these vulnerabilities stem from the lack of authentication, which may lead to cross-site request forgery attacks, thereby manipulating user profile settings...
EUVD-2026-2787
An SQL injection vulnerability in Itflow through 25.06 has been identified in the "roleid" parameter when editing a profile. An attacker with admin account can exploit this issue via blind SQL injection, allowing for the extraction of arbitrary data from the database. The vulnerability arises fro...
CVE-2025-13454
creationtimestamp| type| source ---|---|--- 2026-01-14 23:47:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcgaxh3rjb2m...
CVE-2026-0959
creationtimestamp| type| source ---|---|--- 2026-01-14 23:42:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcgaotap7c2y 2026-01-25 13:18:12+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mdaswgjils2a...
CVE-2025-13455
creationtimestamp| type| source ---|---|--- 2026-01-14 23:20:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcg7hfvyvy27 2026-01-15 00:19:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcgcqwgsew2x...
CVE-2026-0861
creationtimestamp| type| source ---|---|--- 2026-01-14 22:41:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcg5bgkbfd2m 2026-01-15 00:00:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcgbofizi72e 2026-01-15 00:24:33+00:00| seen|...
CVE-2025-65397
creationtimestamp| type| source ---|---|--- 2026-01-14 20:52:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcfx66lmew27 2026-07-06 10:56:23+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxwk2fu5h2f...
CVE-2026-23498
creationtimestamp| type| source ---|---|--- 2026-01-14 20:38:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcfwfp7wj62q 2026-01-24 21:25:08+00:00| seen| https://gist.github.com/alon710/e9696f4cff6966c07545674006d63cd4 2026-01-24 22:34:53+00:00| seen|...
CVE-2025-71166
creationtimestamp| type| source ---|---|--- 2026-01-14 20:18:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcfvbvg5hc2q...
GHSA-657C-WXG6-JMQV pH7-Social-Dating-CMS affected by a stored cross-site scripting (XSS) vulnerability
A stored cross-site scripting XSS vulnerability exists in pH7Software pH7-Social-Dating-CMS 17.9.1 in the user profile Description field...
CVE-2025-63644
A stored cross-site scripting XSS vulnerability exists in pH7Software pH7-Social-Dating-CMS 17.9.1 in the user profile Description field...
CVE-2025-63644
A stored cross-site scripting XSS vulnerability exists in pH7Software pH7-Social-Dating-CMS 17.9.1 in the user profile Description field...
CVE-2025-67746
creationtimestamp| type| source ---|---|--- 2026-01-14 18:13:34+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mcfoccxmw22w 2026-01-24 22:44:04+00:00| seen| https://gist.github.com/alon710/c80e70a12cfb6bfb0765589727871962...