494 matches found
NodeBB XML-RPC Request xmlrpc.php - XML Injection
A remote code execution RCE vulnerability in the xmlrpc.php endpoint of NodeBB Inc NodeBB forum software prior to v1.18.6 allows attackers to execute arbitrary code via crafted XML-RPC requests. id: CVE-2023-43187 info: name: NodeBB XML-RPC Request xmlrpc.php - XML Injection author: 0xParth...
CVE-2026-120007
NodeBB 1.18.0 through 4.16.5 contains an authorization bypass vulnerability that allows unauthenticated visitors to act on other accounts by supplying a uid during POST /register. Attackers can submit an empty email at the /register/complete interstitial to clear a victim's email and confirmation...
CVE-2026-120007
NodeBB versions 1.18.0 through 4.16.5 are susceptible to an authorization bypass vulnerability. Unauthenticated visitors can act on other accounts by supplying a uid during a POST /register request. Specifically, an attacker can submit an empty email at the /register/complete interstitial to clea...
CVE-2026-120007 NodeBB 1.18.0 through 4.16.5 Authorization Bypass via /register/complete uid
NodeBB 1.18.0 through 4.16.5 contains an authorization bypass vulnerability that allows unauthenticated visitors to act on other accounts by supplying a uid during POST /register. Attackers can submit an empty email at the /register/complete interstitial to clear a victim's email and confirmation...
CVE-2026-120007 NodeBB 1.18.0 through 4.16.5 Authorization Bypass via /register/complete uid
NodeBB 1.18.0 through 4.16.5 contains an authorization bypass vulnerability that allows unauthenticated visitors to act on other accounts by supplying a uid during POST /register. Attackers can submit an empty email at the /register/complete interstitial to clear a victim's email and confirmation...
CVE-2026-120007
NodeBB 1.18.0 through 4.16.5 contains an authorization bypass vulnerability that allows unauthenticated visitors to act on other accounts by supplying a uid during POST /register. Attackers can submit an empty email at the /register/complete interstitial to clear a victim's email and confirmation...
EUVD-2026-114327
NodeBB 1.18.0 through 4.16.5 contains an authorization bypass vulnerability that allows unauthenticated visitors to act on other accounts by supplying a uid during POST /register. Attackers can submit an empty email at the /register/complete interstitial to clear a victim's email and confirmation...
PT-2026-133772
NodeBB 1.18.0 through 4.16.5 contains an authorization bypass vulnerability that allows unauthenticated visitors to act on other accounts by supplying a uid during POST /register. Attackers can submit an empty email at the /register/complete interstitial to clear a victim's email and confirmation...
CVE-2026-120007: NodeBB: NodeBB 1.18.0 through 4.16.5 contains an authorization bypass vulnerability that allows unauthenticated visitors to act…
NodeBB 1.18.0 through 4.16.5 contains an authorization bypass vulnerability that allows unauthenticated visitors to act on other accounts by supplying a uid during POST /register. Attackers can submit an empty email at the /register/complete interstitial to clear a victim's email and confirmation...
Malicious code in @zalastax/nolb-nodebb-s (npm)
The package @zalastax/nolb-nodebb-s was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in @zalastax/nolb-nodebb-r (npm)
The package @zalastax/nolb-nodebb-r was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in @zalastax/nolb-nodebb-plugin (npm)
The package @zalastax/nolb-nodebb-plugin was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in @zalastax/nolb-nodebb-plugin-r (npm)
The package @zalastax/nolb-nodebb-plugin-r was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in @zalastax/nolb-nodebb-plugin-k (npm)
The package @zalastax/nolb-nodebb-plugin-k was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in @zalastax/nolb-nodebb-plugin-l (npm)
The package @zalastax/nolb-nodebb-plugin-l was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in @zalastax/nolb-nodebb (npm)
The package @zalastax/nolb-nodebb was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in @zalastax/nolb-nodebb-plugin-y (npm)
The package @zalastax/nolb-nodebb-plugin-y was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in @zalastax/nolb-nodebb-plugin-t (npm)
The package @zalastax/nolb-nodebb-plugin-t was found to contain malicious code. --- Credit: OpenSSF source...