CVE-2026-44784 Discourse: Non-staff group owners can see email password in plaintext through group history

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-latest to before 2026.4.1, group owners who are not necessarily admins or moderators can view a group's outgoing email/SMTP credentials in plaintext...

EUVD-2019-16531

Malware in sbrugna...

Design/Logic Flaw

An issue was discovered in the User IP History Logs aka IPHistoryLogs plugin 1.0.2 for MyBB. There is XSS via the admin/modules/tools/iphistorylogs.php useragent field...

CVE-2019-6979

An issue was discovered in the User IP History Logs aka IPHistoryLogs plugin 1.0.2 for MyBB. There is XSS via the admin/modules/tools/iphistorylogs.php useragent field...

CVE-2019-6979

An issue was discovered in the User IP History Logs aka IPHistoryLogs plugin 1.0.2 for MyBB. There is XSS via the admin/modules/tools/iphistorylogs.php useragent field...

CVE-2019-6979

Affected software: MyBB IP History Logs plugin 1.0.2. Vulnerability: Cross-Site Scripting (XSS) via the useragent field in admin/modules/tools/ip_history_logs.php. Root cause: Input not sanitized, enabling script injection in the admin context. Impact: XSS could execute in the admin’s browser whe...

MyBB IP History Logs Plugin 1.0.2 - Cross-Site Scripting

Exploit Title: MyBB IP History Logs Plugin 1.0.2 - Cross-Site Scripting Date: 1/25/2018 Author: 0xB9 Twitter: @0xB9Sec Contact: 0xB9atpm.me Software Link: https://community.mybb.com/mods.php?action=view&pid=1213 Version: 1.0.2 Tested on: Ubuntu 18.04 CVE: CVE-2019-6979 1. Description: This plugin...

MyBB IP History Logs Plugin 1.0.2 - Cross-Site Scripting

MyBB IP History Logs Plugin 1.0.2 - Cross-Site Scripting Exploit Title: MyBB IP History Logs Plugin 1.0.2 - Cross-Site Scripting Date: 1/25/2018 Author: 0xB9 Twitter: @0xB9Sec Contact: 0xB9atpm.me Software Link: https://community.mybb.com/mods.php?action=view&pid=1213 Version: 1.0.2 Tested on:...

MyBB IP History Logs Plugin 1.0.2 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: MyBB IP History Logs Plugin 1.0.2 - Cross-Site Scripting Author: 0xB9 Twitter: @0xB9Sec Contact: 0xB9atpm.me Software Link: https://community.mybb.com/mods.php?action=view&pid=1213 Version: 1.0.2 Tested on: Ubuntu 18.04 CVE:...