41639 matches found
Code-Projects Simple IT Discussion Forum SQL注入漏洞
Code-Projects Simple IT Discussion Forum is a simple forum developed by Code-Projects as open source. Version 1.0 of the code-projects Simple IT Discussion Forum has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter postid in the...
D-Link DIR-605L 安全漏洞
The D-Link DIR-605L is a wireless router produced by D-Link Corporation. The D-Link DIR-605L version 2.13B01 has a security vulnerability. This vulnerability stems from the operation of the curTime parameter in the formSetMACFilter function of the POST Request Handler component, which may lead to...
PT-2026-31828
Name of the Vulnerable Software and Affected Versions wolfSSL affected versions not specified Description A heap use-after-free issue exists in wolfSSL's TLS 1.3 post-quantum cryptography PQC hybrid KeyShare processing. Specifically, within the TLSX KeyShare ProcessPqcHybridClient function in...
PT-2026-31740
Name of the Vulnerable Software and Affected Versions D-Link DIR-605L version 2.13B01 Description A buffer overflow issue exists in the formVirtualServ function within the POST Request Handler component, specifically in the file /goform/formVirtualServ. The vulnerability is triggered by...
CVE-2026-33350
creationtimestamp| type| source ---|---|--- 2026-04-08 23:33:06+00:00| seen| Telegram/nb1jq11aD1wlJ1YglJrLy9zN5IvfOUCCPtd3YJ7-KFKCMzY 2026-04-09 07:16:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mj2b6vhc752s 2026-04-19 04:07:06+00:00| seen|...
CVE-2026-30815
creationtimestamp| type| source ---|---|--- 2026-04-08 23:33:06+00:00| seen| Telegram/nb1jq11aD1wlJ1YglJrLy9zN5IvfOUCCPtd3YJ7-KFKCMzY 2026-04-13 05:33:41+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mje5dkd3ls2g 2026-05-07 14:00:13+00:00| seen|...
CVE-2026-33756
creationtimestamp| type| source ---|---|--- 2026-04-08 23:32:54+00:00| published-proof-of-concept| Telegram/nyeqn3leA21ahM9eDPOdcOfg88eaiSN6Cc1j2Af2p1JdwTU 2026-04-09 09:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mj2h25tabw2p...
SUSE CVE-2026-4277
An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Add permissions on inline model instances were not validated on submission of forged POST data in GenericInlineModelAdmin. Earlier, unsupported Django series such as 5.0.x, 4.1.x, and 3.2.x were not evaluated a...
SUSE CVE-2026-4292
An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Admin changelist forms using ModelAdmin.listeditable incorrectly allowed new instances to be created via forged POST data. Earlier, unsupported Django series such as 5.0.x, 4.1.x, and 3.2.x were not evaluated a...
SUSE CVE-2026-32283
If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS 1.3...
CVE-2026-5811
A vulnerability was identified in SourceCodester Online Food Ordering System 1.0. Affected by this issue is the function saveproduct of the file /Actions.php of the component POST Parameter Handler. Such manipulation of the argument price leads to business logic errors. The attack may be performe...
CVE-2026-40024
creationtimestamp| type| source ---|---|--- 2026-04-08 23:12:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizg6drzp72z 2026-04-09 01:27:32+00:00| published-proof-of-concept| Telegram/Dz-0u6C1u9T0WCXCs4W5hHtkLp3TtNEV9yEjsLh0yFvD1Y 2026-04-09 01:33:01+00:00| seen|...
pentestfr
Pentest Framework — Kali Linux / VirtualBox Framework Python...
CVE-2026-39429
creationtimestamp| type| source ---|---|--- 2026-04-08 22:57:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizfcvhhxw27 2026-04-09 01:27:18+00:00| published-proof-of-concept| Telegram/viJYT7gg8S3gJ-1aMGboAArF-0qOTu7PWcGdGBWdFKwXc 2026-04-09 07:00:11+00:00| seen|...
CVE-2026-39851
creationtimestamp| type| source ---|---|--- 2026-04-08 22:16:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizd2fxkvu2q...
CVE-2026-5806
A security vulnerability has been detected in code-projects Easy Blog Site 1.0. This affects an unknown function of the file /posts/update.php. The manipulation of the argument postTitle leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed publicly a...
CVE-2026-5711
The Post Blocks & Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sliderStyle' block attribute in the Posts Slider block in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes ...
CVE-2026-5811 SourceCodester Online Food Ordering System POST Parameter Actions.php save_product logic error
A vulnerability was identified in SourceCodester Online Food Ordering System 1.0. Affected by this issue is the function saveproduct of the file /Actions.php of the component POST Parameter Handler. Such manipulation of the argument price leads to business logic errors. The attack may be performe...