23396 matches found
CVE-2023-53929
phpMyFAQ 3.1.12 contains a CSV injection vulnerability that allows authenticated users to inject malicious formulas into their profile names. Attackers can modify their user profile name with a payload like 'calc|a!z|' to trigger code execution when an administrator exports user data as a CSV fil...
CVE-2023-53924
UliCMS 2023.1-sniffing-vicuna contains a remote code execution vulnerability that allows authenticated attackers to upload PHP files with .phar extension during profile avatar upload. Attackers can trigger code execution by visiting the uploaded file's location, enabling system command execution...
CVE-2023-53942
creationtimestamp| type| source ---|---|--- 2025-12-18 23:21:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maccvobcbz2q...
CVE-2025-34452
creationtimestamp| type| source ---|---|--- 2025-12-18 23:08:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3macc6dd2cn22...
CVE-2025-62001
creationtimestamp| type| source ---|---|--- 2025-12-18 23:04:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3macbyeaug42y 2026-01-12 18:07:23+00:00| published-proof-of-concept| Telegram/LwEZji0yzP27YN8omVGHFZ6AM7CJ9LdqNK-dme10ZwkkWc...
CVE-2021-47711
creationtimestamp| type| source ---|---|--- 2025-12-18 23:01:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3macbsyboak2e...
CVE-2025-64355
creationtimestamp| type| source ---|---|--- 2025-12-18 19:48:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mabwyvq5tf2y...
CVE-2025-13217
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the YouTube Video 'value' field in all versions up to, and including, 2.11.0. This is due to insufficient input...
CVE-2025-14081
The Ultimate Member plugin for WordPress is vulnerable to Profile Privacy Setting Bypass in all versions up to, and including, 2.11.0. This is due to a flaw in the secure fields mechanism where field keys are stored in the allowed fields list before the requiredperm check is applied during...
CVE-2025-65009
creationtimestamp| type| source ---|---|--- 2025-12-18 18:04:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mabr6vwgpf2e...
CVE-2025-1031
creationtimestamp| type| source ---|---|--- 2025-12-18 17:49:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mabqfdg3od2o...
CVE-2025-64463
creationtimestamp| type| source ---|---|--- 2025-12-18 17:33:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mabpijezcm2e...
CVE-2025-66387
creationtimestamp| type| source ---|---|--- 2025-12-18 15:53:17+00:00| seen| https://bsky.app/profile/cyber-news-fi.bsky.social/post/3mabjurziqm2b 2025-12-19 02:02:55+00:00| seen| https://bsky.app/profile/PostgreSQL.activitypub.awakari.com.ap.brid.gy/post/3macluqbbh6v2...
CVE-2025-13110
creationtimestamp| type| source ---|---|--- 2025-12-18 13:26:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mabbobursu2q...
CVE-2025-14277
creationtimestamp| type| source ---|---|--- 2025-12-18 13:12:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mabauhhyum2m 2025-12-18 14:05:51+00:00| seen| https://gist.github.com/Darkcrai86/4b1f1163ccd208456fdb7e03226bd553 2025-12-18 14:34:24+00:00| seen|...
CVE-2025-66102
creationtimestamp| type| source ---|---|--- 2025-12-18 09:25:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maau7tlv6y2e...
CVE-2025-64377
creationtimestamp| type| source ---|---|--- 2025-12-18 09:23:57+00:00| seen| https://gist.github.com/Darkcrai86/f0f7427e0ac295413eb0c1460f15a177 2025-12-18 09:49:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maavkwlndc2o...
CVE-2025-66117
creationtimestamp| type| source ---|---|--- 2025-12-18 09:21:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maatyv6vc62o...