59237 matches found
PT-2026-21667
Name of the Vulnerable Software and Affected Versions Serv-U versions prior to 15.5.4 Serv-U 15.5 Description A broken access control issue exists in Serv-U, potentially allowing a malicious actor with administrative privileges to create a system administrator user and execute arbitrary code with...
PT-2026-21601
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-15 ImageMagick versions prior to 6.9.13-40 Description ImageMagick is software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a flaw exists in the ReadSFWImage...
CVE-2026-24956
creationtimestamp| type| source ---|---|--- 2026-02-23 20:31:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfkinxhjvm2s...
GO-2026-4516 Kargo has an Authorization Bypass Vulnerability in Batch Resource Creation API Endpoints in github.com/akuity/kargo
Kargo has an Authorization Bypass Vulnerability in Batch Resource Creation API Endpoints in github.com/akuity/kargo...
CVE-2026-27829
creationtimestamp| type| source ---|---|--- 2026-02-23 13:07:36+00:00| published-proof-of-concept| https://github.com/withastro/astro/security/advisories/GHSA-cj9f-h6r6-4cx2 2026-02-26 01:57:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfq3ruvqrg2u...
CVE-2026-27728
creationtimestamp| type| source ---|---|--- 2026-02-23 13:00:06+00:00| published-proof-of-concept| https://github.com/OneUptime/oneuptime/security/advisories/GHSA-jmhp-5558-qxh5 2026-02-25 17:40:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfp7zft2r22h 2026-02-25...
CVE-2026-1367
creationtimestamp| type| source ---|---|--- 2026-02-23 08:21:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfj7u65vlr2x 2026-02-23 08:21:16+00:00| seen| https://bsky.app/profile/potato.software/post/3mfj7u77mar2v 2026-02-23 11:39:33+00:00| seen|...
CVE-2026-27587
creationtimestamp| type| source ---|---|--- 2026-02-23 04:24:08+00:00| published-proof-of-concept| https://github.com/caddyserver/caddy/security/advisories/GHSA-g7pc-pc7g-h8jh 2026-02-25 03:10:19+00:00| seen| https://gist.github.com/alon710/ab126639375f6dbaf22c192fff07799b 2026-02-25...
CVE-2026-27585
creationtimestamp| type| source ---|---|--- 2026-02-23 04:21:54+00:00| published-proof-of-concept| https://github.com/caddyserver/caddy/security/advisories/GHSA-4xrr-hq4w-6vf4 2026-02-25 03:40:19+00:00| seen| https://gist.github.com/alon710/cc12d45654c7a0339d51fb9dbbc8ed7f...
GHSA-7QQC-WRCW-2FJ9
creationtimestamp| type| source ---|---|--- 2026-02-22 14:00:02+00:00| seen| https://bsky.app/profile/dbt3.ch/post/3mfhcd24jng26 2026-02-22 14:56:59+00:00| seen| https://bsky.app/profile/netalexx.bsky.social/post/3mfhfitqzx22t...
CVE-2026-25556
creationtimestamp| type| source ---|---|--- 2026-02-22 12:55:58+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mfh6qh6qa22o 2026-02-23 12:16:34+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mfjmyveiys2b 2026-02-23 12:47:31+00:00| seen|...
CVE-2025-70049
creationtimestamp| type| source ---|---|--- 2026-02-22 07:53:00+00:00| seen| https://gist.github.com/zcxlighthouse/fd44d8273dd6cc559e2695576fe59068...
CVE-2026-2960
creationtimestamp| type| source ---|---|--- 2026-02-22 07:34:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116113124611885174 2026-02-23 01:18:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfiialliz52h 2026-02-23 07:30:29+00:00| seen|...
CVE-2026-2909
creationtimestamp| type| source ---|---|--- 2026-02-22 03:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116112046566537377 2026-02-22 03:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mfg5hnwbzq2e 2026-02-24 00:00:16+00:00| seen|...
CVE-2019-25447
OrientDB 3.0.17 GA Community Edition contains cross-site request forgery vulnerabilities that allow attackers to perform unauthorized actions by crafting malicious requests to endpoints like /database/, /command/, and /document/. Attackers can create or delete databases, modify schema classes,...
CVE-2019-25454
phpMoAdmin 1.1.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the collection parameter. Attackers can send GET requests to moadmin.php with script payloads in the collection parameter during collection...
CVE-2026-27614
creationtimestamp| type| source ---|---|--- 2026-02-21 19:34:05+00:00| published-proof-of-concept| https://github.com/bugsink/bugsink/security/advisories/GHSA-vp6q-7m36-pq3w 2026-02-25 03:34:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfnqrfzvzp2s...
CVE-2026-2870
creationtimestamp| type| source ---|---|--- 2026-02-21 17:38:28+00:00| published-proof-of-concept| https://t.me/realcodeb0ss/333 2026-03-02 13:40:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mg3ewv4gch2u...
CVE-2026-2049
creationtimestamp| type| source ---|---|--- 2026-02-21 16:11:52+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mfez7paodc26 2026-04-20 20:55:50+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mjxe4z4yvc2h 2026-04-20 21:00:46+00:00| seen|...