CVE-2026-27313

creationtimestamp| type| source ---|---|--- 2026-04-14 21:25:42+00:00| published-proof-of-concept| Telegram/YBv3RW-vRVGMDDlTI6JsAJBRTWorFJbZdjQQujfRdi3MBhU 2026-04-15 14:18:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjk3ltl55n2f 2026-06-11 14:37:06+00:00| seen|...

CVE-2026-34161

Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, a Stored Cross-Site Scripting XSS vulnerability exists in the social post attachment upload functionality, where an authenticated user can upload a malicious HTML file containing JavaScript via the...

CVE-2026-34161 Chamilo LMS: Stored XSS via Malicious File Upload in Social Post Attachments Leads to Arbitrary JavaScript Execution

Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, a Stored Cross-Site Scripting XSS vulnerability exists in the social post attachment upload functionality, where an authenticated user can upload a malicious HTML file containing JavaScript via the...

CVE-2026-34161

Technical details are not publicly available in the provided connected documents. Monitor for updates from Chamilo LMS advisory and subsequent CVE details.

CVE-2026-34161

Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, a Stored Cross-Site Scripting XSS vulnerability exists in the social post attachment upload functionality, where an authenticated user can upload a malicious HTML file containing JavaScript via the...

EUVD-2026-22714

Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, a Stored Cross-Site Scripting XSS vulnerability exists in the social post attachment upload functionality, where an authenticated user can upload a malicious HTML file containing JavaScript via the...

CVE-2026-34623

creationtimestamp| type| source ---|---|--- 2026-04-14 20:28:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mji7tdynvb2m 2026-04-15 02:35:49+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3mjiudgvh662q...

CVE-2026-27312

creationtimestamp| type| source ---|---|--- 2026-04-14 20:27:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mji7qv3ttr2s 2026-04-14 21:25:42+00:00| published-proof-of-concept| Telegram/YBv3RW-vRVGMDDlTI6JsAJBRTWorFJbZdjQQujfRdi3MBhU 2026-04-16 02:07:07+00:00| seen|...

CVE-2026-34614

creationtimestamp| type| source ---|---|--- 2026-04-14 20:21:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mji7frytpy23...

CVE-2026-27311

creationtimestamp| type| source ---|---|--- 2026-04-14 20:19:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mji7ddyvo527 2026-04-14 21:25:42+00:00| published-proof-of-concept| Telegram/YBv3RW-vRVGMDDlTI6JsAJBRTWorFJbZdjQQujfRdi3MBhU 2026-06-11 15:37:26+00:00| seen|...

CVE-2026-27310

creationtimestamp| type| source ---|---|--- 2026-04-14 20:19:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mji7d4kvbq2a 2026-04-14 21:25:30+00:00| published-proof-of-concept| Telegram/qw6naPQmOSFEqbc3iRVVM5dhGETt1a49wBj6uReZM5MuI0 2026-04-16 01:37:07+00:00| seen|...

CVE-2026-34618

creationtimestamp| type| source ---|---|--- 2026-04-14 20:19:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mji7c54dgc24 2026-04-14 20:31:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mji7yq5j4f2o 2026-04-14 21:25:42+00:00| published-proof-of-concept|...

CVE-2026-40683

creationtimestamp| type| source ---|---|--- 2026-04-14 20:19:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mji7bvc7ln27 2026-04-14 21:25:42+00:00| published-proof-of-concept| Telegram/YBv3RW-vRVGMDDlTI6JsAJBRTWorFJbZdjQQujfRdi3MBhU 2026-08-05 17:32:11+00:00| seen|...

CVE-2026-40245

creationtimestamp| type| source ---|---|--- 2026-04-14 20:00:15+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-wrwh-rpq4-87hf 2026-04-16 02:32:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjlemrzh2u2t 2026-04-16 14:01:56+00:00| seen|...

CVE-2026-6119

A vulnerability was identified in AstrBotDevs AstrBot up to 4.22.1. The affected element is the function postdata.get of the component API Endpoint. Such manipulation leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used...

CVE-2026-6015

A vulnerability has been found in Tenda AC9 15.03.02.13. Impacted is the function formQuickIndex of the file /goform/QuickIndex of the component POST Request Handler. Such manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. It is possible to launch the attack remotely...

CVE-2026-34627

creationtimestamp| type| source ---|---|--- 2026-04-14 18:36:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjhzjpu3ks2e 2026-04-14 20:17:19+00:00| seen| Telegram/l9bSu4t-Z8RXv5R9-n5DGKDhjKFYmQA28Cy4bVCP0NEotQk 2026-04-14 20:39:00+00:00| seen|...

CVE-2026-34617

creationtimestamp| type| source ---|---|--- 2026-04-14 18:36:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjhzjj5ghw2k 2026-04-14 20:17:19+00:00| seen| Telegram/l9bSu4t-Z8RXv5R9-n5DGKDhjKFYmQA28Cy4bVCP0NEotQk 2026-04-14 20:43:18+00:00| seen|...

EUVD-2026-22298

A Server-Side Request Forgery SSRF in the /settings/webhooks/create component of Webkul Krayin CRM v2.2.x allows attackers to scan internal resources via supplying a crafted POST request...

EUVD-2026-22284

CWE-93 Improper Neutralization of CRLF Sequences 'CRLF Injection' vulnerability exists that could cause application user credentials to reset when a Web Admin user alters the POST /setPCBEDesc request payload...