CVE-2025-61652

Vulnerability in Wikimedia Foundation DiscussionTools.This issue affects DiscussionTools: from before 1.43.4, 1.44.1...

CVE-2025-61642

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/htmlform/CodexHTMLForm.Php, includes/htmlform/fields/HTMLButtonField.Php. This issue affects...

CVE-2025-61637

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.Action/mediawiki.Action.Edit.Preview.Js, resources/src/mediawiki.Page.Preview.Js...

CVE-2025-61636

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/htmlform/fields/HTMLButtonField.Php. This issue affects MediaWiki: from before 1.39.14, 1.43.4,...

Ankara Host Website Software 跨站脚本漏洞

Ankara Host Website Software is a web design software developed by Ankara Host in Turkey. Versions of Ankara Host Website Software prior to 03022026 contained a cross-site scripting vulnerability. This vulnerability stemmed from improper input during web page generation, and could lead to...

PT-2026-5871

Name of the Vulnerable Software and Affected Versions Fikir Odalari AdminPando versions prior to 2026-01-26 Fikir Odalari AdminPando version 1.0.1 Description A SQL injection issue exists in the login functionality. The username and password parameters are susceptible to SQL injection, potentiall...

CVE-2026-20412

creationtimestamp| type| source ---|---|--- 2026-02-02 18:18:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvhha7eum2o...

CVE-2026-20418

creationtimestamp| type| source ---|---|--- 2026-02-02 14:19:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdv23hkxqo2o...

CVE-2026-1761

creationtimestamp| type| source ---|---|--- 2026-02-02 14:19:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdv237qncn23 2026-03-01 14:34:34+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mfyxj4qruk2s...

CVE-2026-23794

creationtimestamp| type| source ---|---|--- 2026-02-02 13:00:57+00:00| seen| https://seclists.org/oss-sec/2026/q1/138 2026-02-02 15:00:39+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mdv4f2jj622s...

CVE-2025-8587

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AKCE Software Technology R&D Industry and Trade Inc. SKSPro allows SQL Injection. This issue affects SKSPro: through 07012026...

CVE-2025-8587

The CVE-2025-8587 entry describes an SQL Injection vulnerability in SKSPro from AKCE Software Technology R&D Industry and Trade Inc. The issue arises from improper neutralization of special elements in SQL commands, affecting SKSPro versions up to 07012026. Multiple feeds (Red Hat, NVD, CVE list,...

EUVD-2025-206600

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AKCE Software Technology R&D Industry and Trade Inc. SKSPro allows SQL Injection.This issue affects SKSPro: through 07012026...

CVE-2026-24729

An unrestricted upload of file with dangerous type vulnerability in the file upload function of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to execute arbitrary system commands via a malicious class file...

GHSA-V5JW-RXC6-4CVV

creationtimestamp| type| source ---|---|--- 2026-01-30 21:22:13+00:00| seen| Telegram/IY6OfgVKLr1Nm-tUa300uQHvJ6lNcXOePNYcjK2gbqcsYts...

CVE-2026-25130

creationtimestamp| type| source ---|---|--- 2026-01-30 21:18:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdoa42xnk52o 2026-01-31 01:20:51+00:00| seen| https://gist.github.com/alon710/6005675fc930251c9d8000c9e9ab7e40 2026-04-30 07:31:10+00:00| seen|...

CVE-2026-21625

creationtimestamp| type| source ---|---|--- 2026-01-30 19:17:59+00:00| seen| Telegram/xCNGj1TTbKvLiecfleQbdSYCUg38GbVRhl26GliyFWoGt0...

CVE-2026-24855

creationtimestamp| type| source ---|---|--- 2026-01-30 18:14:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdnvsquj5d2r...

CVE-2025-7964

creationtimestamp| type| source ---|---|--- 2026-01-30 17:15:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdnsinvsfx2t 2026-02-02 06:24:24+00:00| published-proof-of-concept| https://t.me/poxek/5867...

CVE-2025-7014

Session Fixation vulnerability in QR Menu Pro Smart Menu Systems Menu Panel allows Session Hijacking.This issue affects Menu Panel: through 29012026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...