28 matches found
CVE-2026-39047
creationtimestamp| type| source ---|---|--- 2026-05-20 17:59:23+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mmcib4y7ky2w 2026-05-20 20:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmcozwcu5h2q 2026-07-13 22:00:12+00:00| seen|...
CVE-2026-6871
creationtimestamp| type| source ---|---|--- 2026-05-20 02:39:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmauud2jhc2i...
CVE-2026-8073
creationtimestamp| type| source ---|---|--- 2026-05-19 20:00:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mma6kokbey2c 2026-05-20 02:55:03+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mmavpopt3b2q...
CVE-2025-4977
creationtimestamp| type| source ---|---|--- 2025-05-20 13:40:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16975 2025-05-20 14:58:39+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpmdtij6qgt2...
CVE-2025-46412
creationtimestamp| type| source ---|---|--- 2025-05-20 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-10 2025-05-21 15:59:20+00:00| seen| https://bsky.app/profile/nihonmatsu.bsky.social/post/3lpoxtdwsnc26 2025-05-21 15:59:20+00:00| seen|...
gamesonline.goedbegin.nl Cross Site Scripting vulnerability OBB-3929041
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
boeken1.zeebad.nl Cross Site Scripting vulnerability OBB-3929025
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
canman.us Cross Site Scripting vulnerability OBB-3928844
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
sentineldongle.com Cross Site Scripting vulnerability OBB-3928773
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
WordPress Crafthemes Demo Import Plugin <= 3.3 is vulnerable to Broken Access Control
Software Crafthemes Demo Import Type Plugin Vulnerable versions = 3.3 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-34800 Patch priority High CVSS severity High 7.6 Developer Claim ownership PSID e10925dbe035 Credits Yudistira Arya Required...
Business Card <= 1.0.0 - Category Edit via CSRF
Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions such as editing card categories via CSRF attacks Make a logged in admin open an HTML document containing:...
KKProgressbar2 Free <= 1.1.4.2 - Admin+ SQL Injection
Description The plugin does not sanitize and escape a parameter before using it in a SQL statement, allowing admin users to perform SQL injection attacks 1. Send a POST request to /wp-admin/admin.php?page=kkpb-add-project with the BODY action=edit-project&id=sleep5 2. Observe the delay in respons...
KKProgressbar2 Free <= 1.1.4.2 - Stored XSS via CSRF
Description The plugin does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack Make a logged in admin open an HTML file containing: alert/XSS/' csrf" XSS will trigger on...
KKProgressbar2 Free <= 1.1.4.2 - Progress Bar Deletion via CSRF
Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks Make a logged in admin open an HTML file containing where is a valid ID: "...
Business Card <= 1.0.0 - Arbitrary Card Deletion via CSRF
Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions such as deleting cards via CSRF attacks Make a logged in admin open an HTML document containing where is a valid ID: "...
KKProgressbar2 Free <= 1.1.4.2 - Admin+ SQL Injection
Description The plugin does not sanitize and escape a parameter before using it in a SQL statement, allowing admin users to perform SQL injection attacks PoC 1. Send a POST request to /wp-admin/admin.php?page=kkpb-add-project with the BODY action=edit-project=sleep5 2. Observe the delay in...
cmti06.org Cross Site Scripting vulnerability OBB-3355568
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
nlc.com.pk Cross Site Scripting vulnerability OBB-3355520
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
savigny.ub.uni-marburg.de Cross Site Scripting vulnerability OBB-2622238
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...