CVE-2026-2097

creationtimestamp| type| source ---|---|--- 2026-02-06 12:06:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10700-3534d-2.html 2026-02-10 07:19:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meigebo2nw23...

CVE-2026-2095

creationtimestamp| type| source ---|---|--- 2026-02-06 12:06:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10700-3534d-2.html 2026-02-10 07:21:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meighaymld2g 2026-02-10 09:00:35+00:00| seen|...

CVE-2026-21643

creationtimestamp| type| source ---|---|--- 2026-02-06 10:00:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me6nhfw7lq23 2026-02-06 15:33:53+00:00| seen| https://infosec.exchange/users/decio/statuses/116024412137620292 2026-02-09 09:16:18+00:00| seen|...

EUVD-2026-5691

A flaw has been found in SourceCodester Gas Agency Management System 1.0. This issue affects some unknown processing of the file /gasmark/phpaction/createUser.php. Executing a manipulation can lead to improper access controls. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-15566

creationtimestamp| type| source ---|---|--- 2026-02-06 04:58:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me64lfqnlr2h 2026-02-06 13:56:03+00:00| seen| https://bsky.app/profile/kubernetes.dev/post/3me72n6p2qy2o 2026-02-06 14:08:57+00:00| seen|...

CVE-2025-70073

An issue in ChestnutCMS v.1.5.8 and before allows a remote attacker to execute arbitrary code via the template creation function...

CVE-2025-68722

Axigen Mail Server before 10.5.57 and 10.6.x before 10.6.26 contains a Cross-Site Request Forgery CSRF vulnerability in the WebAdmin interface through improper handling of the s breadcrumb parameter. The application accepts state-changing requests via the GET method and automatically processes...

PT-2026-6814

Name of the Vulnerable Software and Affected Versions Business Live Chat Software version 1.0 Description The software contains a cross-site request forgery condition that permits attackers to alter user account roles without needing to authenticate. An attacker can create a malicious HTML form t...

PT-2026-6687

Name of the Vulnerable Software and Affected Versions SourceCodester Gas Agency Management System version 1.0 Description A flaw exists due to improper access controls in the processing of the /gasmark/php action/createUser.php file. This allows for unauthorized creation of accounts. The issue is...

PT-2026-6852

Vulnerability Description The endpoint PUT /repos/:owner/:repo/contents/ does not require write permissions and allows access with read permission only via repoAssignment. After passing the permission check, PutContents invokes UpdateRepoFile, which results in: Commit creation Execution of git pu...

CVE-2026-20983

creationtimestamp| type| source ---|---|--- 2026-02-05 23:19:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me5jnlswh62h 2026-02-05 23:19:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me5jokezgc23...

CVE-2026-24302

creationtimestamp| type| source ---|---|--- 2026-02-05 23:18:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me5jlpktku2g 2026-02-10 17:30:28+00:00| seen| https://www.thezdi.com/blog/2026/2/10/the-february-2026-security-update-review 2026-02-10 18:08:27+00:00| seen|...

CVE-2026-21532

creationtimestamp| type| source ---|---|--- 2026-02-05 23:18:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me5jlayxrp2a 2026-02-10 17:30:28+00:00| seen| https://www.thezdi.com/blog/2026/2/10/the-february-2026-security-update-review 2026-02-10 18:08:27+00:00| seen|...

WordPress Community by PeepSo plugin < 6.3.1.2 - User Post Creation via CSRF vulnerability

User Post Creation via CSRF vulnerability discovered by Bikram Kharal in WordPress Plugin Community by PeepSo versions 6.3.1.2...

CVE-2025-69906

creationtimestamp| type| source ---|---|--- 2026-02-05 20:36:34+00:00| published-proof-of-concept| https://t.me/realcodeb0ss/303 2026-02-06 16:20:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me7cpe24e623...

OpenCloud Reva has a Public Link Exploit

Impact A security issue was discovered in Reva based products that enables a malicious user to bypass the scope validation of a public link, allowing it to access resources outside the scope of a public link. Details Public link shares in OpenCloud are bound to a specific scope usually a file or...

GHSA-9965-VMPH-33XX

creationtimestamp| type| source ---|---|--- 2026-02-05 18:53:18+00:00| seen| https://gist.github.com/decsecre583/8166eb37c8565c6548513eec772b47e7...

CVE-2025-70073

An issue in ChestnutCMS v.1.5.8 and before allows a remote attacker to execute arbitrary code via the template creation function...

CVE-2020-37136

ZOC Terminal 7.25.5 contains a denial of service vulnerability in the private key file input field that allows attackers to crash the application. Attackers can overwrite the private key file input with a 2000-byte buffer, causing the application to become unresponsive when attempting to create S...

CVE-2020-37145 HRSALE 1.1.8 - Cross-Site Request Forgery (Add Admin)

HRSALE 1.1.8 contains a cross-site request forgery vulnerability that allows attackers to add unauthorized administrative users through the employee registration form. Attackers can craft a malicious HTML page with hidden form fields to trick authenticated administrators into creating new user...