40929 matches found
CVE-2026-13557 itsourcecode Online Hotel Management System POST Request controller.php add cross site scripting
A vulnerability was identified in itsourcecode Online Hotel Management System 1.0. This vulnerability affects unknown code of the file /admin/modroom/controller.php?action=add of the component POST Request Handler. Such manipulation of the argument Name leads to cross site scripting. The attack m...
CVE-2026-13556 itsourcecode Online Hotel Management System POST Request controller.php edit cross site scripting
A vulnerability was determined in itsourcecode Online Hotel Management System 1.0. This affects an unknown part of the file /admin/modusers/controller.php?action=edit of the component POST Request Handler. This manipulation of the argument Name causes cross site scripting. The attack may be...
CVE-2026-54831
creationtimestamp| type| source ---|---|--- 2026-06-29 09:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpg5oe6qse2a...
CVE-2026-13542
creationtimestamp| type| source ---|---|--- 2026-06-29 08:38:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpg3lntuwv2u 2026-06-29 10:46:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgcpp6hhv22 2026-06-29 19:48:19+00:00| seen|...
CVE-2026-13538
creationtimestamp| type| source ---|---|--- 2026-06-29 08:23:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpg2qskonm2y 2026-06-29 19:50:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphb5bkz222g...
CVE-2026-9676
creationtimestamp| type| source ---|---|--- 2026-06-29 08:19:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpg2j4zj562q 2026-06-29 10:52:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgczuutu62n 2026-06-29 20:47:24+00:00| seen|...
CVE-2026-13537
creationtimestamp| type| source ---|---|--- 2026-06-29 08:09:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpfzx2zswj2a 2026-06-29 10:48:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgctwjk7522 2026-06-29 13:09:08+00:00| seen|...
CVE-2026-13541
creationtimestamp| type| source ---|---|--- 2026-06-29 08:06:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpfzs6miwm2o 2026-06-29 11:18:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgejefew62n 2026-06-29 20:00:10+00:00| seen|...
CVE-2026-53325
creationtimestamp| type| source ---|---|--- 2026-06-29 07:52:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpfyyjq4ti2y 2026-06-29 10:40:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgcg2parh2d 2026-06-30 02:58:28+00:00| seen|...
CVE-2026-9676
The F4 Post Tree WordPress plugin before 2.0.5 does not perform capability checks or CSRF/nonce verification on one of its AJAX actions, allowing authenticated users with Subscriber-level access and above to modify the parent and menu order of arbitrary posts...
CVE-2026-54815
creationtimestamp| type| source ---|---|--- 2026-06-29 07:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpfwxrmzjl2i...
CVE-2026-9676
The vulnerability CVE-2026-9676 affects the F4 Post Tree WordPress plugin prior to 2.0.5. The issue arises because the plugin does not perform capability checks or CSRF/nonce verification on one of its AJAX actions, allowing authenticated users with Subscriber-level access and above to modify the...
CVE-2026-9676 f4 Post Tree < 2.0.5 - Subscriber+ Arbitrary Post Parent/Menu Order Modification
The F4 Post Tree WordPress plugin before 2.0.5 does not perform capability checks or CSRF/nonce verification on one of its AJAX actions, allowing authenticated users with Subscriber-level access and above to modify the parent and menu order of arbitrary posts...
EUVD-2026-40040
The F4 Post Tree WordPress plugin before 2.0.5 does not perform capability checks or CSRF/nonce verification on one of its AJAX actions, allowing authenticated users with Subscriber-level access and above to modify the parent and menu order of arbitrary posts...
CVE-2026-9676
The F4 Post Tree WordPress plugin before 2.0.5 does not perform capability checks or CSRF/nonce verification on one of its AJAX actions, allowing authenticated users with Subscriber-level access and above to modify the parent and menu order of arbitrary posts...
CVE-2026-13538 Wavlink WL-NU516U1-A POST Parameter wireless.cgi sub_401D68 command injection
A vulnerability was determined in Wavlink WL-NU516U1-A M16U1V240425. The affected element is the function sub401D68 of the file /cgi-bin/wireless.cgi of the component POST Parameter Handler. This manipulation of the argument SSID2G2/SSID5G2/AuthMethod2/WPAPSK12 causes command injection. Remote...
CVE-2026-13538
A vulnerability was determined in Wavlink WL-NU516U1-A M16U1V240425. The affected element is the function sub401D68 of the file /cgi-bin/wireless.cgi of the component POST Parameter Handler. This manipulation of the argument SSID2G2/SSID5G2/AuthMethod2/WPAPSK12 causes command injection. Remote...
EUVD-2026-40036
A vulnerability was determined in Wavlink WL-NU516U1-A M16U1V240425. The affected element is the function sub401D68 of the file /cgi-bin/wireless.cgi of the component POST Parameter Handler. This manipulation of the argument SSID2G2/SSID5G2/AuthMethod2/WPAPSK12 causes command injection. Remote...