59261 matches found
PT-2026-6543
Name of the Vulnerable Software and Affected Versions rancher.io/local-path-provisioner versions prior to 0.0.34 Description A malicious user can manipulate the parameters.pathPattern to create PersistentVolumes in arbitrary locations on the host node, potentially overwriting sensitive files or...
CVE-2026-1862
creationtimestamp| type| source ---|---|--- 2026-02-03 22:20:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdyfgcem7g23 2026-02-04 07:04:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116011083135727551 2026-02-04 13:00:14+00:00| seen|...
CVE-2026-1861
creationtimestamp| type| source ---|---|--- 2026-02-03 22:20:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdyfg2mq6w2a 2026-02-04 07:18:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116011138463439555 2026-02-04 13:00:14+00:00| seen|...
CVE-2020-37091
Maian Support Helpdesk 4.3 contains a cross-site request forgery vulnerability that allows attackers to create administrative accounts without authentication. Attackers can craft malicious HTML forms to add admin users and upload PHP files with unrestricted file upload capabilities through the FA...
CVE-2020-37091 Maian Support Helpdesk 4.3 - Cross-Site Request Forgery (Add Admin)
Maian Support Helpdesk 4.3 contains a cross-site request forgery vulnerability that allows attackers to create administrative accounts without authentication. Attackers can craft malicious HTML forms to add admin users and upload PHP files with unrestricted file upload capabilities through the FA...
CVE-2020-37091
Maian Support Helpdesk 4.3 is affected by a cross-site request forgery (CSRF) vulnerability that allows attackers to create administrative accounts without authentication. Exploitation involves crafting malicious HTML forms to add admin users and upload PHP files via the FAQ attachment system, en...
GHSA-VHW6-HQH9-8R23
creationtimestamp| type| source ---|---|--- 2026-02-03 21:28:42+00:00| seen| Telegram/EolE0KtGpDyhwFa3K4uFjcrZ6zOl1wT5WaMQuq2zHWr2Ac...
CVE-2026-25239
creationtimestamp| type| source ---|---|--- 2026-02-03 21:28:42+00:00| seen| Telegram/EolE0KtGpDyhwFa3K4uFjcrZ6zOl1wT5WaMQuq2zHWr2Ac...
GHSA-P92V-9J73-FXX3
creationtimestamp| type| source ---|---|--- 2026-02-03 21:28:17+00:00| seen| Telegram/jaM2tUQzkaVMcebBQi-nzxb3NypB-XkwSNfDQyWeWplRyfw...
CVE-2025-13428
creationtimestamp| type| source ---|---|--- 2026-02-03 21:27:41+00:00| seen| Telegram/gZreaDaUAqPCEwGOcQjlkFNKXwvUOBtZbDSTxEY5AfXiJg...
CVE-2026-25510
CVE-2026-25510 affects CI4MS, a CodeIgniter 4–based CMS skeleton. The vulnerability exists in the /backend/fileeditor/createFile and /backend/fileeditor/save endpoints, where an authenticated user with file editor permissions can upload and save files (including PHP) and execute arbitrary code on...
CVE-2026-25510 CI4MS Vulnerable to Remote Code Execution (RCE) via Arbitrary File Creation and Save in File Editor
CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.28.5.0, an authenticated user with file editor permissions can achieve Remote Code Execution RCE by leveraging the file creation and sav...
CVE-2026-25510 CI4MS Vulnerable to Remote Code Execution (RCE) via Arbitrary File Creation and Save in File Editor
CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.28.5.0, an authenticated user with file editor permissions can achieve Remote Code Execution RCE by leveraging the file creation and sav...
CVE-2026-25510 CI4MS Vulnerable to Remote Code Execution (RCE) via Arbitrary File Creation and Save in File Editor
CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.28.5.0, an authenticated user with file editor permissions can achieve Remote Code Execution RCE by leveraging the file creation and sav...
CVE-2026-25614
creationtimestamp| type| source ---|---|--- 2026-02-03 20:20:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdy6qg4hkv23 2026-02-03 20:21:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdy6rsl7i52h...
CVE-2026-24149
creationtimestamp| type| source ---|---|--- 2026-02-03 20:20:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdy6q7myap27 2026-02-03 20:21:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdy6rl63zs2g 2026-02-04 05:00:00+00:00| seen|...
CVE-2026-24672
creationtimestamp| type| source ---|---|--- 2026-02-03 19:22:40+00:00| seen| Telegram/nt-q5yNevYWKqqRy2ZSijClK6WEfDxXAX6mzKiCUgPYppMI...
GHSA-3CX6-J9J4-54MP
creationtimestamp| type| source ---|---|--- 2026-02-03 18:40:05+00:00| seen| https://gist.github.com/alon710/7111529b9905850774701948975383c7...
CVE-2025-70841
creationtimestamp| type| source ---|---|--- 2026-02-03 18:24:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdxyafvo3o25 2026-08-29 20:00:22+00:00| seen| https://t.me/CyberDispatch/657 2026-08-30 00:00:48+00:00| seen| https://t.me/CyberDispatch/657 2026-08-31...