59153 matches found
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the asynchronous creation of subgroups, potentially leading to null pointer dereferencing...
PHPGurukul Hospital Management System 安全漏洞
PHPGurukul Hospital Management System is a hospital management system developed by PHPGurukul company, based on PHP and MySQL. The PHPGurukul Hospital Management System v4.0 version has a security vulnerability. This vulnerability stems from the lack of cross-site request forgery token verificati...
WordPress Plugin 'LA Studio Element Kit for Elementor' < 1.6.0 Unauthenticated Privilege Escalation via Backdoor
The WordPress application running on the remote host has a version of the 'LA Studio Element Kit for Elementor' plugin that is prior to 1.6.0. It is, therefore, affected by an unauthenticated privilege escalation vulnerability. The plugin contains a backdoor that allows unauthenticated attackers ...
WordPress WP Plugin Info Card plugin <= 6.2.0 - Cross-Site Request Forgery to Arbitrary Custom Plugin Entry Creation vulnerability
Cross-Site Request Forgery to Arbitrary Custom Plugin Entry Creation vulnerability discovered by Duong Quang Hao in WordPress Plugin WP Plugin Info Card versions = 6.2.0...
GHSA-CHM2-M3W2-WCXM
creationtimestamp| type| source ---|---|--- 2026-02-17 23:10:30+00:00| seen| https://gist.github.com/alon710/49fe7932db7265ff1ca29766f0feec28...
GHSA-QW99-GRCX-4PVM
creationtimestamp| type| source ---|---|--- 2026-02-17 21:10:30+00:00| seen| https://gist.github.com/alon710/aaf4c6042dd825c15ce2db35098d1953...
CVE-2026-23595 Unauthenticated Authentication Bypass in application API allows unauthorized administrative account creation
An authentication bypass in the application API allows an unauthorized administrative account to be created. A remote attacker could exploit this vulnerability to create privileged user accounts. Successful exploitation could allow an attacker to gain administrative access, modify system...
CVE-2026-23595
An authentication bypass in the application API allows an unauthorized administrative account to be created. A remote attacker could exploit this vulnerability to create privileged user accounts. Successful exploitation could allow an attacker to gain administrative access, modify system...
CVE-2026-2247
creationtimestamp| type| source ---|---|--- 2026-02-17 13:00:39+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mf2moajbue2o 2026-02-17 13:00:46+00:00| seen| https://infosec.exchange/users/offseq/statuses/116086094955879056...
CVE-2025-38111
creationtimestamp| type| source ---|---|--- 2026-02-17 12:15:52+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mf2k62ojbc2x...
CVE-2026-1762
creationtimestamp| type| source ---|---|--- 2026-02-17 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-048-03...
CVE-2025-69691
creationtimestamp| type| source ---|---|--- 2026-02-17 08:35:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116085051315804589 2026-02-17 21:25:12+00:00| seen| https://bsky.app/profile/hacker.at.thenote.app/post/3mf3iuht6xk2f 2026-05-08 08:45:12+00:00| seen|...
CVE-2026-0967
creationtimestamp| type| source ---|---|--- 2026-02-17 06:01:53+00:00| seen| https://bsky.app/profile/slackers.it/post/3mezvbgx6ze2e 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-03-31 17:00:00+00:00| seen|...
CVE-2026-2451
creationtimestamp| type| source ---|---|--- 2026-02-17 04:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116084089171982013 2026-02-17 04:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mezq64a7zn2w...
WordPress RegistrationMagic plugin < 6.0.7.2 - Subscriber+ Form Creation vulnerability
Subscriber+ Form Creation vulnerability discovered by bRpsd in WordPress Plugin RegistrationMagic versions 6.0.7.2...
CVE-2026-2566
creationtimestamp| type| source ---|---|--- 2026-02-16 19:30:17+00:00| seen| https://infosec.exchange/users/offseq/statuses/116081964859742891 2026-02-16 19:30:18+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3meyry3kv3c2a...
CVE-2026-1335
creationtimestamp| type| source ---|---|--- 2026-02-16 16:30:17+00:00| seen| https://infosec.exchange/users/offseq/statuses/116081257121464468 2026-02-16 16:30:19+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3meyhwammwv2e 2026-02-16 22:35:37+00:00| seen|...
EUVD-2026-6123
The RegistrationMagic WordPress plugin before 6.0.7.2 does not have proper capability checks, allowing subscribers and above to create forms on the site...
