CVE-2026-45190

creationtimestamp| type| source ---|---|--- 2026-05-10 22:45:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mljtlxkuxu2n 2026-05-10 23:56:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mljxjvtq5l24...

CVE-2026-45179

creationtimestamp| type| source ---|---|--- 2026-05-10 20:31:13+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mljm3gtlwy22 2026-05-10 22:50:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mljtuvxomw2h 2026-05-11 16:39:48+00:00| seen|...

CVE-2026-41872

creationtimestamp| type| source ---|---|--- 2026-05-10 20:00:30+00:00| seen| https://jvn.jp/en/jp/JVN38632731 2026-05-11 10:54:35+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mll4cmsyhu2k 2026-05-12 09:25:00+00:00| seen|...

CVE-2026-41530

creationtimestamp| type| source ---|---|--- 2026-05-10 20:00:00+00:00| seen| https://jvn.jp/en/jp/JVN68350834 2026-05-11 07:34:08+00:00| seen| https://bsky.app/profile/eulanov.m.eula.dev.ap.brid.gy/post/3mlkqw7oxmmw2 2026-05-12 09:19:41+00:00| seen|...

CVE-2026-45400

creationtimestamp| type| source ---|---|--- 2026-05-10 19:37:59+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-8w7q-q5jp-jvgx 2026-05-16 08:04:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlxevxzuty2t 2026-05-19...

CVE-2026-45398

creationtimestamp| type| source ---|---|--- 2026-05-10 19:36:49+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-4g37-7p2c-38r9 2026-05-16 10:00:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlxllyrkbw2g...

CVE-2021-47935

creationtimestamp| type| source ---|---|--- 2026-05-10 17:05:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mljal4247t2q 2026-05-18 09:37:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mm4lb7gj2p2p...

CVE-2021-47933

creationtimestamp| type| source ---|---|--- 2026-05-10 16:48:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlj7ns3ojt2p...

EUVD-2022-55979

WordPress Plugin Jetpack 9.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the postid parameter. Attackers can craft URLs to the grunion-form-view.php endpoint with script payloads in the postid parameter ...

EUVD-2022-55972

WordPress Plugin Testimonial Slider and Showcase 2.2.6 contains a stored cross-site scripting vulnerability that allows authenticated editors to inject malicious scripts by failing to sanitize the posttitle parameter. Attackers with editor privileges can inject JavaScript payloads through the...

EUVD-2021-34792

Balbooa Joomla Forms Builder 2.0.6 contains an unauthenticated SQL injection vulnerability in the form submission handler that allows remote attackers to execute arbitrary SQL queries. Attackers can send POST requests to the combaforms component with malicious JSON payloads in the 'id' field...

EUVD-2021-34796

Sentry 8.2.0 contains a remote code execution vulnerability that allows authenticated superusers to execute arbitrary commands by injecting malicious pickle-serialized objects through the audit log entry data parameter. Attackers can submit crafted POST requests to the admin audit log endpoint wi...

EUVD-2021-34786

Ultimate Product Catalog 5.8.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the price parameter. Attackers can submit POST requests to post.php with HTML/JavaScript payloads in the price field to execute arbitrary cod...

CVE-2022-50948

creationtimestamp| type| source ---|---|--- 2026-05-10 14:57:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlizhhg4zy2q...

CVE-2022-50956

creationtimestamp| type| source ---|---|--- 2026-05-10 14:53:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mliz7zpudd2p...

CVE-2022-50958

creationtimestamp| type| source ---|---|--- 2026-05-10 14:51:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mliz4o526v2n...

CVE-2022-50960

creationtimestamp| type| source ---|---|--- 2026-05-10 14:50:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mliyzitiwi2k...

Arbitrary Code Injection

Overview evolutioncms/evolution is an Evolution CMS is a Content Management System, ex MODX Evolution Affected versions of this package are vulnerable to Arbitrary Code Injection via the post parameter in the module creation process. An attacker can execute arbitrary system commands by injecting...

CVE-2022-50958

WordPress Plugin Jetpack 9.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the postid parameter. Attackers can craft URLs to the grunion-form-view.php endpoint with script payloads in the postid parameter ...

CVE-2022-50944

Aero CMS 0.0.1 contains a PHP code injection vulnerability that allows authenticated attackers to execute arbitrary PHP code by uploading malicious files through the image parameter. Attackers can upload PHP files with embedded code to the admin posts.php endpoint with source=addpost parameter, a...