CVE-2020-37136

ZOC Terminal 7.25.5 contains a denial of service vulnerability in the private key file input field that allows attackers to crash the application. Attackers can overwrite the private key file input with a 2000-byte buffer, causing the application to become unresponsive when attempting to create S...

CVE-2020-37118

P5 FNIP-8x16A FNIP-4xSH 1.0.20 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user interaction. Attackers can craft malicious web pages to add new admin users, change passwords, and modify system configurations by tricking...

CVE-2025-13379

creationtimestamp| type| source ---|---|--- 2026-02-05 14:20:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me4ljljxbs2r...

CVE-2025-65081

creationtimestamp| type| source ---|---|--- 2026-02-05 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-064/...

CVE-2026-25523

creationtimestamp| type| source ---|---|--- 2026-02-05 03:18:38+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3me3gkinuhk2u...

CVE-2026-1642

creationtimestamp| type| source ---|---|--- 2026-02-05 02:48:12+00:00| seen| https://seclists.org/oss-sec/2026/q1/144 2026-02-05 14:55:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3me4nhuumkx2q 2026-02-06 01:50:05+00:00| seen|...

CVE-2026-1251

creationtimestamp| type| source ---|---|--- 2026-02-05 00:42:39+00:00| seen| https://bsky.app/profile/opsmatters.com/post/3me35tkya5s22 2026-02-05 00:42:40+00:00| seen| https://bsky.app/profile/potato.software/post/3me35tlikqn2f 2026-02-05 08:33:28+00:00| seen|...

CVE-2026-25546

creationtimestamp| type| source ---|---|--- 2026-02-05 00:03:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me33oegvsp2h...

CVE-2026-22038

creationtimestamp| type| source ---|---|--- 2026-02-05 00:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me33ivw7jv23...

PT-2026-6587

Name of the Vulnerable Software and Affected Versions HRSALE version 1.1.8 Description HRSALE version 1.1.8 is susceptible to a cross-site request forgery condition. This allows attackers to add unauthorized administrative users via the employee registration form. An attacker can create a malicio...

EUVD-2025-206825

Axigen Mail Server before 10.5.57 and 10.6.x before 10.6.26 contains a Cross-Site Request Forgery CSRF vulnerability in the WebAdmin interface through improper handling of the s breadcrumb parameter. The application accepts state-changing requests via the GET method and automatically processes...

PT-2026-6597

Name of the Vulnerable Software and Affected Versions Microweber versions prior to 2.0.20 Description A Cross-Site Scripting issue exists in the /admin/category/create API endpoint. An attacker can manipulate the rel id parameter within a crafted URL. By enticing a user with administrative...

EUVD-2025-206857

An issue in ChestnutCMS v.1.5.8 and before allows a remote attacker to execute arbitrary code via the template creation function...

PT-2026-6602

Name of the Vulnerable Software and Affected Versions ChestnutCMS versions prior to 1.5.9 Description An issue allows a remote attacker to execute arbitrary code via the template creation function. Recommendations Update to version 1.5.9 or later...

ChestnutCMS 安全漏洞

ChestnutCMS is an enterprise-level content management system developed by Liweiyi, featuring a separation between the front-end and back-end components. Versions of ChestnutCMS prior to v1.5.8 contained security vulnerabilities; these vulnerabilities stemmed from the template creation feature,...

CVE-2025-70073

An issue in ChestnutCMS v.1.5.8 and before allows a remote attacker to execute arbitrary code via the template creation function...

PT-2026-6579

Name of the Vulnerable Software and Affected Versions ZOC Terminal version 7.25.5 Description ZOC Terminal version 7.25.5 contains a denial of service condition in the private key file input field. An attacker can cause the application to crash by overwriting the private key file input with a...

CVE-2025-70073

An issue in ChestnutCMS v.1.5.8 and before allows a remote attacker to execute arbitrary code via the template creation function...

CVE-2025-70073

An issue in ChestnutCMS v.1.5.8 and before allows a remote attacker to execute arbitrary code via the template creation function...

CVE-2025-70073

Summary: CVE-2025-70073 affects ChestnutCMS versions prior to 1.5.9. The issue enables a remote attacker to execute arbitrary code through the template creation function. The provided sources explicitly describe vulnerable software versions (ChestnutCMS v1.5.8 and earlier) and cite a template cre...