CVE-2026-13560 Edimax EW-7478APC POST Request formAccept os command injection

A security vulnerability has been detected in Edimax EW-7478APC 1.04. The affected element is the function formAccept of the file /goform/formAccept of the component POST Request Handler. The manipulation of the argument submit-url leads to os command injection. The attack is possible to be carri...

CVE-2026-13557

A vulnerability was identified in itsourcecode Online Hotel Management System 1.0. This vulnerability affects unknown code of the file /admin/modroom/controller.php?action=add of the component POST Request Handler. Such manipulation of the argument Name leads to cross site scripting. The attack m...

CVE-2026-13556

A vulnerability was determined in itsourcecode Online Hotel Management System 1.0. This affects an unknown part of the file /admin/modusers/controller.php?action=edit of the component POST Request Handler. This manipulation of the argument Name causes cross site scripting. The attack may be...

CVE-2026-13557 itsourcecode Online Hotel Management System POST Request controller.php add cross site scripting

A vulnerability was identified in itsourcecode Online Hotel Management System 1.0. This vulnerability affects unknown code of the file /admin/modroom/controller.php?action=add of the component POST Request Handler. Such manipulation of the argument Name leads to cross site scripting. The attack m...

EUVD-2026-40061

A vulnerability was identified in itsourcecode Online Hotel Management System 1.0. This vulnerability affects unknown code of the file /admin/modroom/controller.php?action=add of the component POST Request Handler. Such manipulation of the argument Name leads to cross site scripting. The attack m...

CVE-2026-13556 itsourcecode Online Hotel Management System POST Request controller.php edit cross site scripting

A vulnerability was determined in itsourcecode Online Hotel Management System 1.0. This affects an unknown part of the file /admin/modusers/controller.php?action=edit of the component POST Request Handler. This manipulation of the argument Name causes cross site scripting. The attack may be...

CVE-2026-54831

creationtimestamp| type| source ---|---|--- 2026-06-29 09:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpg5oe6qse2a...

CVE-2026-13542

creationtimestamp| type| source ---|---|--- 2026-06-29 08:38:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpg3lntuwv2u 2026-06-29 10:46:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgcpp6hhv22 2026-06-29 19:48:19+00:00| seen|...

CVE-2026-13538

creationtimestamp| type| source ---|---|--- 2026-06-29 08:23:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpg2qskonm2y 2026-06-29 19:50:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphb5bkz222g...

CVE-2026-9676

creationtimestamp| type| source ---|---|--- 2026-06-29 08:19:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpg2j4zj562q 2026-06-29 10:52:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgczuutu62n 2026-06-29 20:47:24+00:00| seen|...

CVE-2026-13537

creationtimestamp| type| source ---|---|--- 2026-06-29 08:09:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpfzx2zswj2a 2026-06-29 10:48:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgctwjk7522 2026-06-29 13:09:08+00:00| seen|...

CVE-2026-13541

creationtimestamp| type| source ---|---|--- 2026-06-29 08:06:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpfzs6miwm2o 2026-06-29 11:18:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgejefew62n 2026-06-29 20:00:10+00:00| seen|...

CVE-2026-53325

creationtimestamp| type| source ---|---|--- 2026-06-29 07:52:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpfyyjq4ti2y 2026-06-29 10:40:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgcg2parh2d 2026-06-30 02:58:28+00:00| seen|...

CVE-2026-9676

The F4 Post Tree WordPress plugin before 2.0.5 does not perform capability checks or CSRF/nonce verification on one of its AJAX actions, allowing authenticated users with Subscriber-level access and above to modify the parent and menu order of arbitrary posts...

CVE-2026-54815

creationtimestamp| type| source ---|---|--- 2026-06-29 07:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpfwxrmzjl2i...

CVE-2026-9676 f4 Post Tree < 2.0.5 - Subscriber+ Arbitrary Post Parent/Menu Order Modification

The F4 Post Tree WordPress plugin before 2.0.5 does not perform capability checks or CSRF/nonce verification on one of its AJAX actions, allowing authenticated users with Subscriber-level access and above to modify the parent and menu order of arbitrary posts...

CVE-2026-9676

The vulnerability CVE-2026-9676 affects the F4 Post Tree WordPress plugin prior to 2.0.5. The issue arises because the plugin does not perform capability checks or CSRF/nonce verification on one of its AJAX actions, allowing authenticated users with Subscriber-level access and above to modify the...

CVE-2026-9676

The F4 Post Tree WordPress plugin before 2.0.5 does not perform capability checks or CSRF/nonce verification on one of its AJAX actions, allowing authenticated users with Subscriber-level access and above to modify the parent and menu order of arbitrary posts...

EUVD-2026-40040

The F4 Post Tree WordPress plugin before 2.0.5 does not perform capability checks or CSRF/nonce verification on one of its AJAX actions, allowing authenticated users with Subscriber-level access and above to modify the parent and menu order of arbitrary posts...

CVE-2026-13538 Wavlink WL-NU516U1-A POST Parameter wireless.cgi sub_401D68 command injection

A vulnerability was determined in Wavlink WL-NU516U1-A M16U1V240425. The affected element is the function sub401D68 of the file /cgi-bin/wireless.cgi of the component POST Parameter Handler. This manipulation of the argument SSID2G2/SSID5G2/AuthMethod2/WPAPSK12 causes command injection. Remote...