41364 matches found
CVE-2022-50944
Aero CMS 0.0.1 contains a PHP code injection vulnerability that allows authenticated attackers to execute arbitrary PHP code by uploading malicious files through the image parameter. Attackers can upload PHP files with embedded code to the admin posts.php endpoint with source=addpost parameter, a...
CVE-2026-45223
creationtimestamp| type| source ---|---|--- 2026-05-11 20:02:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlm2wduquj2k 2026-05-11 20:30:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlm4jgz6l62e...
CVE-2026-6146
creationtimestamp| type| source ---|---|--- 2026-05-11 19:47:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mlm23hs5hc2s 2026-05-11 19:47:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mlm23hs5hc2s 2026-05-11 21:34:10+00:00| seen|...
MantisBT has an authorization bypass in private issue monitoring
Using a crafted POST request to bugmonitoradd.php, a user with project-level access can add themselves as a monitor for a private issue they do not have access to. Despite displaying an Access Denied error, the application accepts the request and creates a monitor relationship for the private...
GHSA-GGW7-9675-6V4V MantisBT has an authorization bypass in private issue monitoring
Using a crafted POST request to bugmonitoradd.php, a user with project-level access can add themselves as a monitor for a private issue they do not have access to. Despite displaying an Access Denied error, the application accepts the request and creates a monitor relationship for the private...
CVE-2026-45005
creationtimestamp| type| source ---|---|--- 2026-05-11 19:15:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllychagb52q 2026-05-11 19:15:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllychagb52q...
WordPress Rate Star Review Vote – AJAX Reviews, Votes, Star Ratings plugin <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification vulnerability
Missing Authorization to Authenticated Subscriber+ Arbitrary Post Modification vulnerability discovered by cpforensic in WordPress Plugin Rate Star Review versions = 1.6.4...
CVE-2026-45667
creationtimestamp| type| source ---|---|--- 2026-05-11 19:07:10+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-m69w-p7m4-585j 2026-05-16 00:24:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlwlgnytx32i...
CVE-2026-45003
creationtimestamp| type| source ---|---|--- 2026-05-11 19:03:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllxo3pxue2r 2026-05-11 19:03:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllxo3pxue2r...
CVE-2026-44997
creationtimestamp| type| source ---|---|--- 2026-05-11 18:53:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllx36epxz2r 2026-05-11 18:53:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllx36epxz2r...
CVE-2026-45665
creationtimestamp| type| source ---|---|--- 2026-05-11 18:42:11+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-cqp4-qqvg-3787 2026-05-16 00:45:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlwmkigryb2e...
CVE-2026-4890
creationtimestamp| type| source ---|---|--- 2026-05-11 18:40:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllwemsz4v2c 2026-05-12 09:24:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnhr2mtcj2s 2026-05-13 12:31:36+00:00| seen|...
CVE-2026-43639
creationtimestamp| type| source ---|---|--- 2026-05-11 18:24:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllvhlnan72e...
CVE-2026-44413
creationtimestamp| type| source ---|---|--- 2026-05-11 18:22:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllvdvujox2l 2026-05-11 18:22:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllvdvujox2l 2026-05-12 12:31:51+00:00| seen|...
CVE-2026-42858
creationtimestamp| type| source ---|---|--- 2026-05-11 18:18:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllv5f5zlk2c 2026-05-11 18:18:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllv5f5zlk2c...
CVE-2026-43640
creationtimestamp| type| source ---|---|--- 2026-05-11 18:17:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllv3ug34r2k 2026-05-11 18:17:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllv3ug34r2k 2026-05-16 18:07:08+00:00| seen|...
CVE-2026-38566
HireFlow v1.2 does not implement CSRF token validation on any state-changing POST endpoint. All forms password change at /profile, candidate deletion at /candidates/delete/, feedback submission at /feedback/add/, interview scheduling at /interviews/add are vulnerable to CSRF. An attacker who can...
CVE-2026-43434
creationtimestamp| type| source ---|---|--- 2026-05-11 18:01:23+00:00| seen| https://mastodon.social/ap/users/115755483699003887/statuses/116557246423998157 2026-05-11 19:00:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllxhbfqww2n 2026-05-11 19:00:01+00:00| seen|...
CVE-2026-7210
creationtimestamp| type| source ---|---|--- 2026-05-11 17:56:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mlltwjtgei2s 2026-05-11 19:35:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllzgb52dt2n 2026-05-11 19:35:14+00:00| seen|...