23395 matches found
CVE-2025-15446
creationtimestamp| type| source ---|---|--- 2026-01-05 00:00:21+00:00| published-proof-of-concept| Telegram/w7iUL3Vp67abj1H-nNd3inxdyXfsisMlk7DmZtsMn4j6yDQ 2026-01-05 00:29:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbn6msnak42g...
PT-2026-1343
Name of the Vulnerable Software and Affected Versions Craft versions 5.0.0-RC1 through 5.8.20 Craft versions 4.0.0-RC1 through 4.16.16 Description Craft is a platform for creating digital experiences. Authenticated users on a Craft installation could potentially expose sensitive assets via their...
PT-2026-1291
Name of the Vulnerable Software and Affected Versions Campcodes Supplier Management System version 1.0 Description A flaw exists in Campcodes Supplier Management System version 1.0, specifically within the file /retailer/edit profile.php. The manipulation of the txtRetailerAddress argument can le...
Craft CMS 信息泄露漏洞
Craft CMS is a content management system CMS open source by Craft CMS. An information disclosure vulnerability exists in Craft CMS versions 5.0.0-RC1 through 5.8.20 and 4.0.0-RC1 through 4.16.16, which stems from improper handling of a user's profile photo, which could lead to the exposure of...
CVE-2025-15442
creationtimestamp| type| source ---|---|--- 2026-01-04 12:44:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mblxb2loph2o...
CVE-2025-14830
creationtimestamp| type| source ---|---|--- 2026-01-04 12:29:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mblwg7egdu2u...
CVE-2026-0577
creationtimestamp| type| source ---|---|--- 2026-01-04 11:00:38+00:00| published-proof-of-concept| Telegram/WAeIMp-qLoix2fMN5m4VAPW7c3mTPvm4gc9HGkPHwEa3bG0 2026-01-04 12:28:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mblweftqpc2o...
CVE-2025-3660
creationtimestamp| type| source ---|---|--- 2026-01-04 02:49:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbkvy37js622...
CVE-2025-62140
creationtimestamp| type| source ---|---|--- 2026-01-03 17:21:25+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3mbjwb477lu2b...
CVE-2025-53860
creationtimestamp| type| source ---|---|--- 2026-01-03 10:43:24+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mbj7z7qnq22r...
CVE-2026-0547
A vulnerability was found in PHPGurukul Online Course Registration up to 3.1. This issue affects some unknown processing of the file /admin/edit-student-profile.php of the component Student Registration Page. The manipulation of the argument photo results in unrestricted upload. The attack may be...
CVE-2026-21652
creationtimestamp| type| source ---|---|--- 2026-01-03 07:10:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbiu4mdfhy2x...
CVE-2026-21647
creationtimestamp| type| source ---|---|--- 2026-01-03 06:41:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbisi6lhtj2y...
CVE-2026-21649
creationtimestamp| type| source ---|---|--- 2026-01-03 06:37:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbisbhp6ui2c...
CVE-2026-21646
creationtimestamp| type| source ---|---|--- 2026-01-03 06:34:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbis3inj772r...
CVE-2025-15428
A weakness has been identified in UTT 进取 512W 1.7.7-171114. Affected is the function strcpy of the file /goform/formRemoteControl. This manipulation of the argument Profile causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to the public an...
GHSA-MQHG-V22X-PQJ8 Bagisto is vulnerable to SSTI via name parameters provided by non-admin low-privilege users
Summary SSTI is possible via first name and last name parameters provided by lowest-privileged users. Details 1. Go to http://127.0.0.1:8000/ and login or signup 2. Go to http://127.0.0.1:8000/customer/account/profile 3. Now edit the first name and last name to 77 4. Notice it appears as 49 POC -...
Malicious code in ent-profile-unauth-msr-stop (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cccedcc6e7e3c24d5bf3abeb2d093bb12520a9973d6aaf7874d6559127e947c The package ent-profile-unauth-msr-stop was found to contain malicious code. Source: ghsa-malware...
MAL-2026-14 Malicious code in ent-profile-unauth-msr-stop (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cccedcc6e7e3c24d5bf3abeb2d093bb12520a9973d6aaf7874d6559127e947c The package ent-profile-unauth-msr-stop was found to contain malicious code. Source: ghsa-malware...
