28479 matches found
CVE-2025-6088
creationtimestamp| type| source ---|---|--- 2025-09-11 02:46:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyjq72f4dg2t...
PT-2025-37125
The Mitfahrgelegenheit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘date’ parameter in all versions up to, and including, 1.1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acce...
VulnCheck KEV: CVE-2021-37538
Multiple SQL injection vulnerabilities in SmartDataSoft SmartBlog for PrestaShop before 4.06 allow a remote unauthenticated attacker to execute arbitrary SQL commands via the day, month, or year parameter to the controllers/front/archive.php archive controller, or the idcategory parameter to the...
CVE-2025-8392: Improper Neutralization of Input During Web Page Generation
The Mitfahrgelegenheit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘date’ parameter in all versions up to, and including, 1.1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acce...
WordPress plugin "Mitfahrgelegenheit" has a cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2025-10099
A weakness has been identified in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /intranet/educarusuariocad.php of the component Editar usuário Page. This manipulation of the argument email/datainicial/dataexpiracao causes cross site...
CVE-2025-58989
creationtimestamp| type| source ---|---|--- 2025-09-10 18:38:10+00:00| seen| Telegram/Pzrec53G8H2Sva5BmDzA24MSMh8QddRyHGtkjfBEu9Y70FI...
CVE-2025-9712
creationtimestamp| type| source ---|---|--- 2025-09-10 12:50:30+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lyibipcqas2x 2025-09-11 03:14:55+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lyjrshhuzs2v...
CVE-2025-10213
creationtimestamp| type| source ---|---|--- 2025-09-10 12:46:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyibbfsimj2r...
CVE-2025-10214
creationtimestamp| type| source ---|---|--- 2025-09-10 12:41:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyiayhfnzv2r...
CVE-2025-32988
creationtimestamp| type| source ---|---|--- 2025-09-10 09:29:04+00:00| seen| https://gist.github.com/Darkcrai86/b87e14a5bc55e398469cc37b642c3272 2025-09-30 01:31:27+00:00| seen| https://bsky.app/profile/gcpweekly.bsky.social/post/3lzzeuwsiue2i 2025-10-13 02:31:29+00:00| seen|...
CVE-2025-9086
A cookie is set using the secure keyword for https://target 2. curl is redirected to or otherwise made to speak with http://target same hostname, but using clear text HTTP using the same cookie set 3. The same cookie name is set - but with just a slash as path path="/",. Since this site is not...
CVE-2025-10148
creationtimestamp| type| source ---|---|--- 2025-09-10 03:49:32+00:00| seen| https://daniel.haxx.se/blog/2025/09/10/curl-8-16-0/ 2025-09-10 03:58:42+00:00| seen| https://seclists.org/oss-sec/2025/q3/161 2025-09-10 05:58:15+00:00| seen|...
CVE-2025-59036
creationtimestamp| type| source ---|---|--- 2025-09-10 01:42:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyh45nc2ef2r...
CVE-2025-10170
creationtimestamp| type| source ---|---|--- 2025-09-10 01:18:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyh2u6z5ka2l 2026-01-08 17:12:59+00:00| published-proof-of-concept| Telegram/4CtzKjLGN2rpe0L4uqzYjissA8Lt1-eJ9QU29FfQ949wE...
Glib Heap Buffer Overflow DoS
The vulnerability of the gdatetimenewfromiso8601 function in the Glib library is related to integer overflow. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Linux Distros Unpatched Vulnerability : CVE-2016-3856
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netd in Android before 2016-08-05 mishandles tethering and stdio streams, which allows attackers to cause a denial of service or possibly have unspecified other...
Linux Distros Unpatched Vulnerability : CVE-2021-46351
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is an Assertion 'localtza == ecmadatelocaltimezoneadjustment datevalue' failed at /jerry-...
Linux Distros Unpatched Vulnerability : CVE-2016-6742
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An elevation of privilege vulnerability in the Synaptics touchscreen driver in Android before 2016-11-05 could enable a local malicious application to execute...
Linux Distros Unpatched Vulnerability : CVE-2021-46346
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is an Assertion 'localtza == ecmadatelocaltimezoneadjustment datevalue' failed at /jerry-...