24144 matches found
CVE-2026-40265
creationtimestamp| type| source ---|---|--- 2026-04-13 19:31:57+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-p5w6-75f9-cc2p 2026-04-17 03:33:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjnyiejwmc22...
CVE-2026-39536
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WP Chill RSVP and Event Management rsvp allows Retrieve Embedded Sensitive Data.This issue affects RSVP and Event Management: from n/a through = 2.7.16...
CVE-2026-4124
The Ziggeo plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.1.1. The wpajaxziggeoajax handler only verifies a nonce checkajaxreferer but performs no capability checks via currentusercan. Furthermore, the nonce 'ziggeoajaxnonce' is exposed to all...
EUVD-2026-21994
Improper Neutralization of Input During Web Page Generation vulnerability allows Stored Cross-Site Scripting via event comments. This issue affects Pandora FMS: from 777 through 800...
EUVD-2026-21999
Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via Event Response execution. This issue affects Pandora FMS: from 777 through 800...
CVE-2026-6194
creationtimestamp| type| source ---|---|--- 2026-04-13 18:17:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjfhzlygy22h 2026-04-13 19:19:04+00:00| published-proof-of-concept| Telegram/61DYlWTca6IkcTFpN2RYBtwr9MKXFEKysLP63-1xRoUERI 2026-04-13 20:18:53+00:00| seen|...
CVE-2025-13020
creationtimestamp| type| source ---|---|--- 2026-04-13 17:59:41+00:00| seen| Telegram/oO774kvwIB8daNH9tl28ZNHNLpZ-tzMTZMRdZwVl3XAtyg...
CVE-2025-8043
creationtimestamp| type| source ---|---|--- 2026-04-13 17:57:07+00:00| published-proof-of-concept| Telegram/X7VHG2-47Qhhj8GB65kRLNGPkxuaTLxPWX3Bbqfyik 2026-04-13 17:57:12+00:00| seen| Telegram/6v6zD9tAOLQqBWglapyz-ckJ2uvJM6ALnCTHHJnFRLcYW7Q...
CVE-2026-34188
Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via Event Response execution. This issue affects Pandora FMS: from 777 through 800...
CVE-2026-34188
Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via Event Response execution. This issue affects Pandora FMS: from 777 through 800...
CVE-2026-34188 OS Command Injection in Event Response Execution
Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via Event Response execution. This issue affects Pandora FMS: from 777 through 800...
CVE-2026-34188
The CVE-2026-34188 entry concerns Pandora FMS (versions 777 through 800) and describes an OS command injection vulnerability. The root cause is improper neutralization of special elements used in an OS command within the Event Response execution path. Attack impact is the potential to execute OS ...
CVE-2026-34188 OS Command Injection in Event Response Execution
Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via Event Response execution. This issue affects Pandora FMS: from 777 through 800...
CVE-2026-30812
CVE-2026-30812 describes stored cross-site scripting in Pandora FMS components (versions 777–800) due to improper neutralization of input during web page generation. Affected: Pandora FMS event comments; attack requires user interaction. The connected sources corroborate the same description acro...
CVE-2026-30812
Improper Neutralization of Input During Web Page Generation vulnerability allows Stored Cross-Site Scripting via event comments. This issue affects Pandora FMS: from 777 through 800...
CVE-2026-30812 Stored Cross-Site Scripting in Event Comments via Filter Bypass
Improper Neutralization of Input During Web Page Generation vulnerability allows Stored Cross-Site Scripting via event comments. This issue affects Pandora FMS: from 777 through 800...
CVE-2026-30812 Stored Cross-Site Scripting in Event Comments via Filter Bypass
Improper Neutralization of Input During Web Page Generation vulnerability allows Stored Cross-Site Scripting via event comments. This issue affects Pandora FMS: from 777 through 800...
CVE-2026-40885
creationtimestamp| type| source ---|---|--- 2026-04-13 08:53:04+00:00| published-proof-of-concept| https://github.com/patrickhener/goshs/security/advisories/GHSA-7h3j-592v-jcrp 2026-04-21 21:27:12+00:00| seen| Telegram/F2G63fMNgyZcc0oNt6XGHExAkvTr9kUyS9C9Ki-AIDnnQ5g...