CVE-2023-4293

The Premium Packages - Sell Digital Products Securely plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.7.4 due to insufficient restriction on the 'wpdmppupdateprofile' function. This makes it possible for authenticated attackers, with minimal...

CVE-2023-40176

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any registered user can exploit a stored XSS through their user profile by setting the payload as the value of the time zone user preference. Even though the time zone is selected from a drop...

CVE-2023-40177

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any registered user can use the content field of their user profile page to execute arbitrary scripts with programming rights, thus effectively performing rights escalation. This issue is...

CVE-2026-20974

creationtimestamp| type| source ---|---|--- 2026-01-09 08:50:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mby4isvv652r...

CVE-2026-20972

creationtimestamp| type| source ---|---|--- 2026-01-09 08:45:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mby47h5dav2r...

CVE-2026-20969

creationtimestamp| type| source ---|---|--- 2026-01-09 08:38:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mby3tuzmdh2x...

CVE-2026-21688

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 have a Type Confusion vulnerability in SIccCalcOp::ArgsPushed at IccProfLib/IccMpeCalc.cpp. This...

CVE-2026-21868

Flag Forge is a Capture The Flag CTF platform. Versions 2.3.2 and below have a Regular Expression Denial of Service ReDoS vulnerability in the user profile API endpoint /api/user/username. The application constructs a regular expression dynamically using unescaped user input the username paramete...

CVE-2026-21683

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 have a Type Confusion vulnerability in icStatusCMM::CIccEvalCompare::EvaluateProfile. This...

CVE-2026-22046

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 have a heap-buffer-overflow vulnerability in CIccProfileXml::ParseBasic at...

CVE-2026-21685

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 have Undefined Behavior in CIccTagLut16::Read. This vulnerability affects users of the iccDEV libra...

CVE-2026-22047

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 have a heap-buffer-overflow vulnerability in SIccCalcOp::Describe at IccProfLib/IccMpeCalc.cpp. Thi...

CVE-2025-14736

creationtimestamp| type| source ---|---|--- 2026-01-09 07:49:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbxz4tfnpr22 2026-01-09 08:02:40+00:00| seen| Telegram/MAmCAqE5N-CcCiscRnAxFC7TtJbF4arRvs8kSSuse2DTZ-M 2026-01-09 09:11:02+00:00| seen|...

CVE-2026-22710

creationtimestamp| type| source ---|---|--- 2026-01-09 01:34:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbxe4qlhim2e...

CVE-2026-22712

creationtimestamp| type| source ---|---|--- 2026-01-09 01:29:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbxdtnq37c2o...

CVE-2026-22713

creationtimestamp| type| source ---|---|--- 2026-01-09 01:24:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbxdly66yn2r...

CVE-2026-0731

creationtimestamp| type| source ---|---|--- 2026-01-09 01:20:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbxdfb734e2e 2026-01-09 14:14:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115865555268914985...

CVE-2026-0732

creationtimestamp| type| source ---|---|--- 2026-01-09 01:01:40+00:00| published-proof-of-concept| Telegram/wQ8nxOjr8ZBRpibxV-QJ35MQDOhHo2ZciZBVnTr7zQXstw 2026-01-09 01:17:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbxd7c4kqx2c 2026-01-09 09:12:26+00:00| seen|...

CVE-2026-0733

creationtimestamp| type| source ---|---|--- 2026-01-09 01:01:40+00:00| published-proof-of-concept| Telegram/wQ8nxOjr8ZBRpibxV-QJ35MQDOhHo2ZciZBVnTr7zQXstw 2026-01-09 01:44:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbxeongeyj2o...

CVE-2025-67282

In TIM BPM Suite/ TIM FLOW through 9.1.2 multiple Authorization Bypass vulnerabilities exists which allow a low privileged user to download password hashes of other user, access work items of other user, modify restricted content in workflows, modify the applications logo and manipulate the profi...