59254 matches found
CVE-2025-13897
creationtimestamp| type| source ---|---|--- 2026-01-09 13:05:34+00:00| seen| Telegram/AGJsClzs7lPfqLOjvN9BoXsrmzIKG2pVKSyr843qoYc 2026-01-09 13:28:11+00:00| seen| https://gist.github.com/Darkcrai86/f7830be956257ae4029829269eac2c19 2026-01-09 14:55:45+00:00| seen|...
CVE-2025-13908
creationtimestamp| type| source ---|---|--- 2026-01-09 13:05:34+00:00| seen| Telegram/AGJsClzs7lPfqLOjvN9BoXsrmzIKG2pVKSyr843qoYc 2026-01-09 13:25:50+00:00| seen| https://gist.github.com/Darkcrai86/d9f7dc71bbfe24f5fdc9bd209b544517 2026-01-09 14:37:41+00:00| seen|...
CVE-2025-11453
creationtimestamp| type| source ---|---|--- 2026-01-09 13:04:47+00:00| seen| Telegram/Q6W0k1WKh9B3-4oN0DiaBhUByTzqYQ-BzTWUpEPQoF3Zxk 2026-01-09 13:25:27+00:00| seen| https://gist.github.com/Darkcrai86/99d1e2784c328c83fa7751590be89277...
CVE-2025-13704
creationtimestamp| type| source ---|---|--- 2026-01-09 13:04:47+00:00| seen| Telegram/Q6W0k1WKh9B3-4oN0DiaBhUByTzqYQ-BzTWUpEPQoF3Zxk 2026-01-09 13:27:30+00:00| seen| https://gist.github.com/Darkcrai86/1331776c53ad6518bf921578dab0c3d4 2026-01-09 15:11:46+00:00| seen|...
GHSA-VMC4-9828-R48R
creationtimestamp| type| source ---|---|--- 2026-01-09 12:43:59+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3mbyjkl6o6b2c...
CVE-2005-1884
Directory traversal vulnerability in the 1 rmdir or 2 mkdir commands in upload.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to create or delete arbitrary directories via a .. dot dot in the dir parameter...
CVE-2023-25305
PolyMC Launcher = 1.4.3 is vulnerable to Directory Traversal. A mrpack file can be maliciously crafted to create arbitrary files outside of the installation directory...
CVE-2023-43955
The com.phlox.tvwebbrowser TV Bro application through 2.0.0 for Android mishandles external intents through WebView. This allows attackers to execute arbitrary code, create arbitrary files. and perform arbitrary downloads via JavaScript that uses takeBlobDownloadData...
CVE-2023-50136
Cross Site Scripting XSS vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the name field when creating a new custom table...
CVE-2023-31298
Cross Site Scripting XSS vulnerability in Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 718, allows remote attackers to execute arbitrary code and obtain sensitive information via the User ID field when creating a new system user...
CVE-2023-4666
The Form Maker by 10Web WordPress plugin before 1.15.20 does not validate signatures when creating them on the server from user input, allowing unauthenticated users to create arbitrary files and lead to RCE...
CVE-2023-4059
The Profile Builder WordPress plugin before 3.9.8 lacks authorisation and CSRF in its page creation function which allows unauthenticated users to create the register, log-in and edit-profile pages from the plugin on the blog...
CVE-2023-40918
KnowStreaming 3.3.0 is vulnerable to Escalation of Privileges. Unauthorized users can create a new user with an admin role...
CVE-2023-40815
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Category Creation Name Field...
CVE-2018-12628
An issue was discovered in Eventum 3.5.0. CSRF in htdocs/manage/users.php allows creating another user with admin privileges...
CVE-2018-12457
expressCart before 1.1.6 allows remote attackers to create an admin user via a /admin/setup Referer header...
CVE-2018-12884
In Octopus Deploy 3.0 onwards before 2018.6.7, an authenticated user with incorrect permissions may be able to create Accounts under the Infrastructure menu...
CVE-2018-10127
An issue was discovered in XYHCMS 3.5. It has CSRF via an index.php?g=Manage=Rbac=addUser request, resulting in addition of an account with the administrator role...