40054 matches found
CVE-2026-65707
Likeshop through 3.0.5 contains an authenticated SQL injection vulnerability that allows admin-level users to extract arbitrary database contents by submitting unsanitized POST parameters to the adjustAccount endpoint. The adjustAccount method in UserLogic.php concatenates the money, integral,...
CVE-2026-66027
creationtimestamp| type| source ---|---|--- 2026-07-24 16:59:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrftaqlx4w2w...
CVE-2026-56163
creationtimestamp| type| source ---|---|--- 2026-07-24 15:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrfpdqsahf2i 2026-07-24 22:01:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrge4cpvum2q 2026-07-25 04:30:24+00:00| seen|...
CVE-2026-65707 Likeshop 3.0.5 Authenticated SQL Injection via adjustAccount Endpoint
Likeshop through 3.0.5 contains an authenticated SQL injection vulnerability that allows admin-level users to extract arbitrary database contents by submitting unsanitized POST parameters to the adjustAccount endpoint. The adjustAccount method in UserLogic.php concatenates the money, integral,...
CVE-2026-12496
Stored Cross-Site Scripting CWE-79 in the OPC XML-DA server statistics in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows an unauthenticated remote attacker to execute arbitrary JavaScript in an administrator's browser session hijacking,...
EUVD-2026-48612
lakeFS through 1.83.0, fixed in commit 71a45ee, contains an authentication bypass vulnerability in the /setupcommprefs endpoint that allows unauthenticated attackers to overwrite operator metadata including email, name, and company after setup completion. Attackers can POST to this endpoint to...
CVE-2026-12496 Loytec LINX firmware: Unauthenticated stored XSS in OPC XML-DA server
Stored Cross-Site Scripting CWE-79 in the OPC XML-DA server statistics in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows an unauthenticated remote attacker to execute arbitrary JavaScript in an administrator's browser session hijacking,...
CVE-2026-12496
Loytec LINX firmware (LINX-A64, affected on 8.4.16 and earlier) contains an unauthenticated stored XSS in the OPC XML-DA server statistics. A crafted User-Agent header in a POST /da request can execute arbitrary JavaScript in an administrator’s browser, enabling session hijacking, credential thef...
EUVD-2026-48589
Stored Cross-Site Scripting CWE-79 in the OPC XML-DA server statistics in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows an unauthenticated remote attacker to execute arbitrary JavaScript in an administrator's browser session hijacking,...
CVE-2026-12496
Stored Cross-Site Scripting CWE-79 in the OPC XML-DA server statistics in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows an unauthenticated remote attacker to execute arbitrary JavaScript in an administrator's browser session hijacking,...
CVE-2026-23302
creationtimestamp| type| source ---|---|--- 2026-07-24 13:25:31+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrfhbbzjc72d...
CVE-2026-63815
creationtimestamp| type| source ---|---|--- 2026-07-24 13:25:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrfhb3ikw42o 2026-08-06 04:47:06+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806...
CVE-2026-53392
creationtimestamp| type| source ---|---|--- 2026-07-24 13:25:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrfhb3ikw42o 2026-08-06 04:46:17+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806...
CVE-2026-45813
creationtimestamp| type| source ---|---|--- 2026-07-24 13:15:49+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrfgpm7jcl2g 2026-07-25 06:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrh6uz5ad72m 2026-07-28 20:07:07+00:00| seen|...
CVE-2026-66144
creationtimestamp| type| source ---|---|--- 2026-07-24 13:08:05+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrfgc365h32s 2026-07-25 06:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrh6usosqu2w...
CVE-2026-61884
creationtimestamp| type| source ---|---|--- 2026-07-24 13:04:27+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrfg3mgxra2p 2026-07-24 22:22:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrgfap6ldt2v 2026-07-24 23:00:27+00:00| seen|...
CVE-2026-16804
creationtimestamp| type| source ---|---|--- 2026-07-24 12:45:46+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-google-chrome-64 2026-07-24 13:30:23+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrfhjxwat52o 2026-07-27 04:45:03+00:00| seen|...
CVE-2026-66142
creationtimestamp| type| source ---|---|--- 2026-07-24 12:43:05+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrfeve5pmb2u 2026-07-25 05:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrh3jnj3do2f...