27683 matches found
CVE-2021-4473
Tianxin Internet Behavior Management System contains a command injection vulnerability in the Reporter component endpoint that allows unauthenticated attackers to execute arbitrary commands by supplying a crafted objClass parameter containing shell metacharacters and output redirection. Attackers...
CVE-2023-49092
creationtimestamp| type| source ---|---|--- 2026-04-07 11:43:13+00:00| seen| https://gist.github.com/soul2zimate/a5296bc917881b1c43c396b5caf75393 2026-07-20 18:00:05+00:00| seen| Telegram/WNPKjULv0ephKNyiWQmiLebMVhKs5Yq19I9tIqi1CZzDTIM 2026-07-21 00:00:33+00:00| seen|...
CVE-2026-33227
creationtimestamp| type| source ---|---|--- 2026-04-07 10:07:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mivjticz7b2g...
CVE-2026-1839
creationtimestamp| type| source ---|---|--- 2026-04-07 06:05:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miv4dqxdnj2i...
Endian Firewall DATE Parameter OS Command Injection Vulnerability (CNVD-2026-18423)
Endian Firewall is a network security firewall system from Endian. An operating system command injection vulnerability exists in the Endian Firewall DATE parameter, which stems from incomplete regular expression validation of the DATE parameter in /cgi-bin/logslog.cgi, and can be exploited by an...
Endian Firewall DATE Parameter OS Command Injection Vulnerability
Endian Firewall is a network security firewall system from Endian. An operating system command injection vulnerability exists in the Endian Firewall DATE parameter, which stems from incomplete regular expression validation of the DATE parameter in /cgi-bin/logsids.cgi, and can be exploited by an...
PT-2026-30957
ChurchCRM is an open-source church management system. Prior to 7.1.0, he FindFundRaiser.php endpoint reflects user-supplied input DateStart and DateEnd into HTML input field attributes without proper output encoding for the HTML attribute context. An authenticated attacker can craft a malicious U...
PT-2026-31005
Plane is an an open-source project management tool. Prior to 1.3.0, the IssueBulkUpdateDateEndpoint allows a project member ADMIN or MEMBER to modify the start date and target date of ANY issue across the entire Plane instance, regardless of workspace or project membership. The endpoint fetches...
Endian Firewall DATE Parameter OS Command Injection Vulnerability
Endian Firewall is a network security firewall system from Endian. An operating system command injection vulnerability exists in the Endian Firewall DATE parameter, which stems from incomplete regular expression validation of the DATE parameter in /cgi-bin/logssmtp.cgi, and can be exploited by an...
Endian Firewall DATE Parameter OS Command Injection Vulnerability (CNVD-2026-18422)
Endian Firewall is a network security firewall system from Endian. An operating system command injection vulnerability exists in the Endian Firewall DATE parameter, which stems from incomplete regular expression validation of the DATE parameter in /cgi-bin/logsopenvpn.cgi, and can be exploited by...
Plane 安全漏洞
Plane is an open-source, self-hosted project planning tool developed by Plane OpenSource. Versions of Plane prior to 1.3.0 contained security vulnerabilities. These vulnerabilities stemmed from a lack of workspace or project filtering in the IssueBulkUpdateDateEndpoint, which could lead to...
GHSA-38HG-WW64-RRWC
creationtimestamp| type| source ---|---|--- 2026-04-06 23:22:19+00:00| seen| Telegram/F-tbnQCu7KGoJ0u4OEM4TknejxA1jNnRqA-1uSHs9aPRtPw...
GHSA-WV3H-5FX7-966H
creationtimestamp| type| source ---|---|--- 2026-04-06 23:22:09+00:00| seen| Telegram/m01DCzKFy5kAtT9sjIWhyEARPkz65AkyqWTYGgzfJ1E6g...
CVE-2026-5707
creationtimestamp| type| source ---|---|--- 2026-04-06 23:01:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miuemkuwn322 2026-04-06 23:22:29+00:00| seen| Telegram/dGmhhMfdsalqLxLHWWo3a-Yu-qP75XdMdTLlCh9YxDeGRw 2026-04-07 04:11:35+00:00| seen|...
CVE-2026-35413
creationtimestamp| type| source ---|---|--- 2026-04-06 22:36:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miud7skcjm2i...
GHSA-V59X-FVPJ-J22X
creationtimestamp| type| source ---|---|--- 2026-04-06 21:21:11+00:00| published-proof-of-concept| Telegram/2EnXoILGVbego74Wp-yQgBLadCUgQoVCHSSN8NjOPP4QJIY...
GHSA-JJ4J-X5WW-CWH9
creationtimestamp| type| source ---|---|--- 2026-04-06 19:28:12+00:00| published-proof-of-concept| Telegram/FD1XDPHxmeq4cPhZAsKic1sVLDUHGuIRMXt4NvJcjYqn2U...
CVE-2026-5668
creationtimestamp| type| source ---|---|--- 2026-04-06 19:04:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mitxewiwuz2j...
CVE-2026-34992
creationtimestamp| type| source ---|---|--- 2026-04-06 18:19:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mituubi63e2i 2026-04-06 19:28:45+00:00| published-proof-of-concept| Telegram/ECjdy8s76GZBalwnIB79ij56tbajMeprVumTyCn-zmzM...