59258 matches found
CVE-2026-25057
MarkUs is a web application for the submission and grading of student assignments. Prior to 2.9.1, instructors are able to upload a zip file to create an assignment from an exported configuration courses//assignments/uploadconfigfiles. The uploaded zip file entry names are used to create paths to...
CVE-2026-25495
creationtimestamp| type| source ---|---|--- 2026-02-09 18:02:59+00:00| published-proof-of-concept| https://github.com/craftcms/cms/security/advisories/GHSA-2453-mppf-46cj 2026-02-09 23:40:05+00:00| seen| https://gist.github.com/alon710/05c03b478ac40a36955b23403707c5ec...
CVE-2026-23906
creationtimestamp| type| source ---|---|--- 2026-02-09 16:27:41+00:00| seen| https://seclists.org/oss-sec/2026/q1/154 2026-02-09 20:19:16+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mehbh7zacn26 2026-02-10 16:25:17+00:00| seen|...
CVE-2026-24343
creationtimestamp| type| source ---|---|--- 2026-02-09 15:24:09+00:00| seen| https://seclists.org/oss-sec/2026/q1/153 2026-02-09 16:45:01+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3megvi4cpd52b 2026-02-10 16:25:24+00:00| seen|...
CVE-2025-63354
Hitron HI3120 v7.2.4.5.2b1 allows stored XSS via the Parental Control option when creating a new filter. The device fails to properly handle inputs, allowing an attacker to inject and execute JavaScript...
CVE-2026-0870
creationtimestamp| type| source ---|---|--- 2026-02-09 06:14:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10702-b40aa-2.html 2026-02-09 07:17:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mefvrzdoi62v...
CVE-2026-1615
creationtimestamp| type| source ---|---|--- 2026-02-09 05:18:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mefp3rgidt2m 2026-02-09 06:00:33+00:00| seen| https://infosec.exchange/users/offseq/statuses/116039144621552776 2026-02-09 06:00:34+00:00| seen|...
CVE-2026-25568
WeKan versions prior to 8.19 contain an authorization logic vulnerability where the instance configuration setting allowPrivateOnly is not sufficiently enforced at board creation time. When allowPrivateOnly is enabled, users can still create public boards due to incomplete server-side enforcement...
CVE-2026-25563
WeKan versions prior to 8.19 contain an insecure direct object reference IDOR in checklist creation and related checklist routes. The implementation does not verify that the supplied cardId belongs to the supplied boardId, allowing cross-board ID tampering by manipulating identifiers...
CVE-2026-25564
WeKan versions prior to 8.19 contain an insecure direct object reference IDOR in checklist creation and related checklist routes. The implementation does not verify that the supplied cardId belongs to the supplied boardId, allowing cross-board ID tampering by manipulating identifiers...
Hitron HI3120 安全漏洞
The Hitron HI3120 is a cable modem produced by Hitron Company in Taiwan, China. The Hitron HI3120 v7.2.4.5.2b1 version contains a security vulnerability. This vulnerability arises from improper input handling during the creation of new filters, and it may lead to storage cross-site scripting...
PT-2026-7117
Hitron HI3120 v7.2.4.5.2b1 allows stored XSS via the Parental Control option when creating a new filter. The device fails to properly handle inputs, allowing an attacker to inject and execute JavaScript...
CVE-2026-2151
creationtimestamp| type| source ---|---|--- 2026-02-08 18:00:18+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3meej7rytxx2e 2026-02-08 18:00:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116036312485765301 2026-05-09 21:00:04+00:00| seen|...
CVE-2026-2165
A weakness has been identified in detronetdip E-commerce 1.0.0. Impacted is an unknown function of the file /Admin/assets/backend/seller/addseller.php of the component Account Creation Endpoint. Executing a manipulation of the argument email can lead to missing authentication. The attack can be...
CVE-2026-2165
A weakness has been identified in detronetdip E-commerce 1.0.0. Impacted is an unknown function of the file /Admin/assets/backend/seller/addseller.php of the component Account Creation Endpoint. Executing a manipulation of the argument email can lead to missing authentication. The attack can be...
EUVD-2026-5784
A weakness has been identified in detronetdip E-commerce 1.0.0. Impacted is an unknown function of the file /Admin/assets/backend/seller/addseller.php of the component Account Creation Endpoint. Executing a manipulation of the argument email can lead to missing authentication. The attack can be...
CVE-2026-2165 detronetdip E-commerce Account Creation Endpoint add_seller.php missing authentication
A weakness has been identified in detronetdip E-commerce 1.0.0. Impacted is an unknown function of the file /Admin/assets/backend/seller/addseller.php of the component Account Creation Endpoint. Executing a manipulation of the argument email can lead to missing authentication. The attack can be...
CVE-2026-23903
creationtimestamp| type| source ---|---|--- 2026-02-08 15:47:26+00:00| seen| https://seclists.org/oss-sec/2026/q1/148 2026-02-08 17:14:48+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3meegoheeuv2w...
CVE-2026-25881
creationtimestamp| type| source ---|---|--- 2026-02-08 10:32:31+00:00| published-proof-of-concept| https://github.com/nyariv/SandboxJS/security/advisories/GHSA-ww7g-4gwx-m7wj 2026-02-09 22:18:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mehi5amyms2a 2026-02-10...