CVE-2026-7508

A vulnerability was found in Bootstrap CMS 0.9.0-alpha. Affected is an unknown function of the file resources/views/pages/show.blade.php of the component Page Creation Handler. Performing a manipulation of the argument body results in code injection. Remote exploitation of the attack is possible...

CVE-2019-25547

creationtimestamp| type| source ---|---|--- 2026-04-30 23:13:36+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mkqqim32k72k...

CVE-2026-3346

creationtimestamp| type| source ---|---|--- 2026-04-30 22:47:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkqoz2hd4x2v 2026-05-03 21:06:48+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mky2smzu6f2f...

CVE-2026-7508

A vulnerability was found in Bootstrap CMS 0.9.0-alpha. Affected is an unknown function of the file resources/views/pages/show.blade.php of the component Page Creation Handler. Performing a manipulation of the argument body results in code injection. Remote exploitation of the attack is possible...

EUVD-2026-26456

A vulnerability was found in Bootstrap CMS 0.9.0-alpha. Affected is an unknown function of the file resources/views/pages/show.blade.php of the component Page Creation Handler. Performing a manipulation of the argument body results in code injection. Remote exploitation of the attack is possible...

CVE-2026-7508 Bootstrap CMS Page Creation show.blade.php code injection

A vulnerability was found in Bootstrap CMS 0.9.0-alpha. Affected is an unknown function of the file resources/views/pages/show.blade.php of the component Page Creation Handler. Performing a manipulation of the argument body results in code injection. Remote exploitation of the attack is possible...

CVE-2026-7508 Bootstrap CMS Page Creation show.blade.php code injection

A vulnerability was found in Bootstrap CMS 0.9.0-alpha. Affected is an unknown function of the file resources/views/pages/show.blade.php of the component Page Creation Handler. Performing a manipulation of the argument body results in code injection. Remote exploitation of the attack is possible...

CVE-2026-7551

creationtimestamp| type| source ---|---|--- 2026-04-30 22:18:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqnf62gaw2k 2026-04-30 23:31:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkqrjfylyl2v 2026-05-25 19:07:08+00:00| seen|...

CVE-2026-33452

creationtimestamp| type| source ---|---|--- 2026-04-30 22:01:13+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mkqmh6eclc2s 2026-04-30 22:09:37+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mkqmw3qe7o32 2026-05-03...

CVE-2026-41220

creationtimestamp| type| source ---|---|--- 2026-04-30 22:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqmg6e64r2q 2026-05-06 11:02:09+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3ml6kg6h6pv2h...

CVE-2026-36841

creationtimestamp| type| source ---|---|--- 2026-04-30 22:00:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqmfplzr52k...

CVE-2026-4503

creationtimestamp| type| source ---|---|--- 2026-04-30 21:45:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqllcixu326 2026-04-30 22:46:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkqoxati4x2t...

CVE-2026-42281

creationtimestamp| type| source ---|---|--- 2026-04-30 21:00:54+00:00| published-proof-of-concept| https://github.com/MagicMirrorOrg/MagicMirror/security/advisories/GHSA-ph6f-2cvq-79hq 2026-05-01 03:00:05+00:00| seen| Telegram/Bh4iyBQIMN2Hl9Jl9GcGtuPw1PskodE0qn4w68HKrpiOc 2026-05-11 16:50:45+00:0...

CVE-2022-50992

creationtimestamp| type| source ---|---|--- 2026-04-30 20:51:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkqikfiedi2v 2026-04-30 21:23:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkqkdmhs2v2t 2026-07-08 01:03:22+00:00| exploited|...

CVE-2026-40601

creationtimestamp| type| source ---|---|--- 2026-04-30 19:20:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqdh4eymd2q 2026-04-30 19:49:00+00:00| seen| https://bsky.app/profile/cybercod.bsky.social/post/3mkqf2pttnz2b...

CVE-2026-35514

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In version 4.9.0, the endpoint POST /user/invited does not validate any invite token, authentication header, or session. Any unauthenticated attacker can call this endpoi...

CVE-2026-42593

creationtimestamp| type| source ---|---|--- 2026-04-30 18:31:56+00:00| published-proof-of-concept| https://github.com/gotenberg/gotenberg/security/advisories/GHSA-3cv5-q585-h563 2026-05-14 17:49:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mltevnjauu2r...

CVE-2026-42591

creationtimestamp| type| source ---|---|--- 2026-04-30 18:31:27+00:00| published-proof-of-concept| https://github.com/gotenberg/gotenberg/security/advisories/GHSA-rm4c-xj6x-49mw 2026-05-14 17:17:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mltd3zcdo52v 2026-05-21 11:37:06+00:0...

EUVD-2026-26405

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In version 4.9.0, the endpoint POST /user/invited does not validate any invite token, authentication header, or session. Any unauthenticated attacker can call this endpoi...

Arbitrary Argument Injection

Overview Affected versions of this package are vulnerable to Arbitrary Argument Injection via the WriteMetadata process. An attacker can manipulate files, create or overwrite arbitrary files, and establish symlinks or hard links by injecting specially crafted metadata values containing newline...