41035 matches found
CVE-2026-41150
creationtimestamp| type| source ---|---|--- 2026-05-29 17:06:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmyziwxpd32x...
CVE-2026-32905
creationtimestamp| type| source ---|---|--- 2026-05-29 17:02:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmyzaf633z2v 2026-06-01 23:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mnb72hkvlb25...
CVE-2026-44962
creationtimestamp| type| source ---|---|--- 2026-05-29 17:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmyz6o75yk2w 2026-06-01 07:56:27+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/plesk-security-advisory-av26-534 2026-06-01 10:42:49+00:00| seen|...
CVE-2018-25400
The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter. Attackers can send GET requests to the ajax/formpost.php endpoint with crafted SQL payloads to extract...
CVE-2018-25389
HaPe PKH 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'namakelompok' POST parameter sent to lap-anggota-kelompok-pdf.php. Attackers can send a crafted request with a time-based blind payload to...
CVE-2026-46376
creationtimestamp| type| source ---|---|--- 2026-05-29 16:03:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmyvyn3gkj2r 2026-05-29 19:00:04+00:00| seen| https://t.me/GithubRedTeam/86439 2026-05-29 19:00:46+00:00| seen| Telegram/0a4Mie4mnrD5nSuJkVgKyWL1alPSr-QiQEf3Sf43L8qbY...
CVE-2026-10042
creationtimestamp| type| source ---|---|--- 2026-05-29 15:59:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmyvqxjkrw2j 2026-05-30 22:01:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn42hb7lav2i...
CVE-2026-10073
creationtimestamp| type| source ---|---|--- 2026-05-29 15:52:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmyveb6nhi27 2026-05-30 23:01:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn45rvg2ti25...
CVE-2018-25400
The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter. Attackers can send GET requests to the ajax/formpost.php endpoint with crafted SQL payloads to extract...
CVE-2018-25400 The Open ISES Project 3.30A SQL Injection via form_post.php
The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter. Attackers can send GET requests to the ajax/formpost.php endpoint with crafted SQL payloads to extract...
EUVD-2018-21922
The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter. Attackers can send GET requests to the ajax/formpost.php endpoint with crafted SQL payloads to extract...
CVE-2018-25400 The Open ISES Project 3.30A SQL Injection via form_post.php
The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter. Attackers can send GET requests to the ajax/formpost.php endpoint with crafted SQL payloads to extract...
CVE-2018-25400
The CVE-2018-25400 entry concerns the Open ISES Project 3.30A and an SQL injection via the id parameter in the ajax/form_post.php endpoint. The vulnerability allows unauthenticated attackers to execute arbitrary SQL queries and exfiltrate data (e.g., database schema names) through crafted GET req...
EUVD-2018-21914
MaxOn ERP Software 8.x-9.x contains an SQL injection vulnerability that allows authenticated users to execute arbitrary SQL queries through the nomor, user, and jenis parameters in the logactivity function. Attackers can send POST requests to /index.php/user/logactivity with malicious SQL code in...
CVE-2026-49093
creationtimestamp| type| source ---|---|--- 2026-05-29 14:45:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmyrmbdqgh2a...
CVE-2026-42399
creationtimestamp| type| source ---|---|--- 2026-05-29 14:45:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmyrmbdqgh2a...
CVE-2026-42398
creationtimestamp| type| source ---|---|--- 2026-05-29 14:45:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmyrmbdqgh2a...
Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit
An unknown threat actor has been observed using a large language model LLM agent to conduct post-compromise actions after obtaining initial access following the exploitation of a publicly-accessible Marimo network using a recently disclosed vulnerability. "The attacker compromised an...
CVE-2026-45610
WWBN AVideo is an open source video platform. In 29.0 and earlier, there is a cross-site request forgery vulnerability on the 2FA toggle. plugin/LoginControl/set.json.php accepts POST type=set2FA value=false, calls LoginControl::setUser2FAUser::getId, false on the session-authenticated user, and...