GHSA-Q447-RJ3R-2CGH

creationtimestamp| type| source ---|---|--- 2026-02-18 06:40:30+00:00| seen| https://gist.github.com/alon710/00067d90a2461fbca1a5464c0bbbd63b...

CVE-2026-1368

The Video Conferencing with Zoom WordPress plugin before 4.6.6 contains an AJAX handler that has its nonce verification commented out, allowing unauthenticated attackers to generate valid Zoom SDK signatures for any meeting ID and retrieve the site's Zoom SDK key...

CVE-2026-2023 WP Plugin Info Card <= 6.2.0 - Cross-Site Request Forgery to Arbitrary Custom Plugin Entry Creation

The WP Plugin Info Card plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.2.0. This is due to missing nonce validation in the ajaxsavecustomplugin function, which is disabled by prefixing the check with 'false &&'. This makes it possible for...

GHSA-V6C6-VQQG-W888

creationtimestamp| type| source ---|---|--- 2026-02-18 01:10:31+00:00| seen| https://gist.github.com/alon710/c1dd925bfef757917be700332b8feba8...

CVE-2025-70062

PHPGurukul Hospital Management System v4.0 contains a Cross-Site Request Forgery CSRF vulnerability in the 'Add Doctor' module. The application fails to enforce CSRF token validation on the add-doctor.php endpoint. This allows remote attackers to create arbitrary Doctor accounts privileged users ...

PT-2026-20481

PHPGurukul Hospital Management System v4.0 contains a Cross-Site Request Forgery CSRF vulnerability in the 'Add Doctor' module. The application fails to enforce CSRF token validation on the add-doctor.php endpoint. This allows remote attackers to create arbitrary Doctor accounts privileged users ...

PHPGurukul Hospital Management System 安全漏洞

PHPGurukul Hospital Management System is a hospital management system developed by PHPGurukul company, based on PHP and MySQL. The PHPGurukul Hospital Management System v4.0 version has a security vulnerability. This vulnerability stems from the lack of cross-site request forgery token verificati...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the asynchronous creation of subgroups, potentially leading to null pointer dereferencing...

PT-2026-20788

Name of the Vulnerable Software and Affected Versions LibreNMS versions 26.1.1 and below Description LibreNMS, an auto-discovering PHP/MySQL/SNMP based network monitoring tool, contains a Stored Cross-Site Scripting XSS issue. The device group name is not sanitized, allowing attackers with admin...

WordPress Plugin 'LA Studio Element Kit for Elementor' < 1.6.0 Unauthenticated Privilege Escalation via Backdoor

The WordPress application running on the remote host has a version of the 'LA Studio Element Kit for Elementor' plugin that is prior to 1.6.0. It is, therefore, affected by an unauthenticated privilege escalation vulnerability. The plugin contains a backdoor that allows unauthenticated attackers ...

WordPress WP Plugin Info Card plugin <= 6.2.0 - Cross-Site Request Forgery to Arbitrary Custom Plugin Entry Creation vulnerability

Cross-Site Request Forgery to Arbitrary Custom Plugin Entry Creation vulnerability discovered by Duong Quang Hao in WordPress Plugin WP Plugin Info Card versions = 6.2.0...

GHSA-CHM2-M3W2-WCXM

creationtimestamp| type| source ---|---|--- 2026-02-17 23:10:30+00:00| seen| https://gist.github.com/alon710/49fe7932db7265ff1ca29766f0feec28...

GHSA-QW99-GRCX-4PVM

creationtimestamp| type| source ---|---|--- 2026-02-17 21:10:30+00:00| seen| https://gist.github.com/alon710/aaf4c6042dd825c15ce2db35098d1953...

CVE-2026-23595 Unauthenticated Authentication Bypass in application API allows unauthorized administrative account creation

An authentication bypass in the application API allows an unauthorized administrative account to be created. A remote attacker could exploit this vulnerability to create privileged user accounts. Successful exploitation could allow an attacker to gain administrative access, modify system...

CVE-2026-23595

An authentication bypass in the application API allows an unauthorized administrative account to be created. A remote attacker could exploit this vulnerability to create privileged user accounts. Successful exploitation could allow an attacker to gain administrative access, modify system...

CVE-2026-2247

creationtimestamp| type| source ---|---|--- 2026-02-17 13:00:39+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mf2moajbue2o 2026-02-17 13:00:46+00:00| seen| https://infosec.exchange/users/offseq/statuses/116086094955879056...

CVE-2025-38111

creationtimestamp| type| source ---|---|--- 2026-02-17 12:15:52+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mf2k62ojbc2x...

CVE-2026-1762

creationtimestamp| type| source ---|---|--- 2026-02-17 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-048-03...

CVE-2025-69691

creationtimestamp| type| source ---|---|--- 2026-02-17 08:35:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116085051315804589 2026-02-17 21:25:12+00:00| seen| https://bsky.app/profile/hacker.at.thenote.app/post/3mf3iuht6xk2f 2026-05-08 08:45:12+00:00| seen|...

CVE-2026-0967

creationtimestamp| type| source ---|---|--- 2026-02-17 06:01:53+00:00| seen| https://bsky.app/profile/slackers.it/post/3mezvbgx6ze2e 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-03-31 17:00:00+00:00| seen|...