59162 matches found
CVE-2025-13428
creationtimestamp| type| source ---|---|--- 2026-02-03 21:27:41+00:00| seen| Telegram/gZreaDaUAqPCEwGOcQjlkFNKXwvUOBtZbDSTxEY5AfXiJg...
CVE-2026-25510 CI4MS Vulnerable to Remote Code Execution (RCE) via Arbitrary File Creation and Save in File Editor
CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.28.5.0, an authenticated user with file editor permissions can achieve Remote Code Execution RCE by leveraging the file creation and sav...
CVE-2026-25510
CVE-2026-25510 affects CI4MS, a CodeIgniter 4–based CMS skeleton. The vulnerability exists in the /backend/fileeditor/createFile and /backend/fileeditor/save endpoints, where an authenticated user with file editor permissions can upload and save files (including PHP) and execute arbitrary code on...
CVE-2026-25510 CI4MS Vulnerable to Remote Code Execution (RCE) via Arbitrary File Creation and Save in File Editor
CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.28.5.0, an authenticated user with file editor permissions can achieve Remote Code Execution RCE by leveraging the file creation and sav...
CVE-2026-25510 CI4MS Vulnerable to Remote Code Execution (RCE) via Arbitrary File Creation and Save in File Editor
CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.28.5.0, an authenticated user with file editor permissions can achieve Remote Code Execution RCE by leveraging the file creation and sav...
CVE-2026-25614
creationtimestamp| type| source ---|---|--- 2026-02-03 20:20:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdy6qg4hkv23 2026-02-03 20:21:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdy6rsl7i52h...
CVE-2026-24149
creationtimestamp| type| source ---|---|--- 2026-02-03 20:20:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdy6q7myap27 2026-02-03 20:21:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdy6rl63zs2g 2026-02-04 05:00:00+00:00| seen|...
CVE-2026-24672
creationtimestamp| type| source ---|---|--- 2026-02-03 19:22:40+00:00| seen| Telegram/nt-q5yNevYWKqqRy2ZSijClK6WEfDxXAX6mzKiCUgPYppMI...
GHSA-3CX6-J9J4-54MP
creationtimestamp| type| source ---|---|--- 2026-02-03 18:40:05+00:00| seen| https://gist.github.com/alon710/7111529b9905850774701948975383c7...
CVE-2025-70841
creationtimestamp| type| source ---|---|--- 2026-02-03 18:24:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdxyafvo3o25 2026-08-29 20:00:22+00:00| seen| https://t.me/CyberDispatch/657 2026-08-30 00:00:48+00:00| seen| https://t.me/CyberDispatch/657 2026-08-31...
CVE-2026-24762
creationtimestamp| type| source ---|---|--- 2026-02-03 18:10:05+00:00| seen| https://gist.github.com/alon710/b1f5845bad08cb88f5b1ff4accf32464...
GHSA-GJX9-J8F8-7J74 JinJava Bypass through ForTag leads to Arbitrary Java Execution
Impact Vulnerability Type: Sandbox Bypass / Remote Code Execution Affected Component: Jinjava Affected Users: - Organizations using HubSpot's Jinjava template rendering engine for user-provided template content - Any system that renders untrusted Jinja templates using HubSpot's Jinjava...
CVE-2026-25547
creationtimestamp| type| source ---|---|--- 2026-02-03 17:40:52+00:00| published-proof-of-concept| https://github.com/isaacs/brace-expansion/security/advisories/GHSA-7h2j-956f-4vf2 2026-02-06 12:00:54+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3me6u7cox4r2h 2026-03-19...
GHSA-FC6G-2GCP-2QRQ
creationtimestamp| type| source ---|---|--- 2026-02-03 17:40:05+00:00| seen| https://gist.github.com/alon710/4c9483a1ae63cde824ec94a73e4b4ee0...
CVE-2025-13292
creationtimestamp| type| source ---|---|--- 2026-02-03 17:33:46+00:00| seen| https://bsky.app/profile/google-bot.bsky.social/post/3mdxvfq5l342w...
CVE-2026-1285
creationtimestamp| type| source ---|---|--- 2026-02-03 15:53:03+00:00| seen| https://seclists.org/oss-sec/2026/q1/141 2026-02-03 17:16:15+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mdxugave7y2b 2026-02-03 17:23:21+00:00| seen|...
CVE-2025-13473
creationtimestamp| type| source ---|---|--- 2026-02-03 15:53:03+00:00| seen| https://seclists.org/oss-sec/2026/q1/141 2026-02-03 17:16:14+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mdxugave7y2b 2026-02-05 22:09:24+00:00| seen|...
CVE-2026-1312
creationtimestamp| type| source ---|---|--- 2026-02-03 15:53:03+00:00| seen| https://seclists.org/oss-sec/2026/q1/141 2026-02-03 17:16:15+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mdxugave7y2b 2026-02-13 00:46:46+00:00| seen|...