CVE-2019-25642

Bootstrapy CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through POST parameters. Attackers can inject SQL payloads into the threadid parameter of forum-thread.php, the subject parameter of...

CVE-2019-25642 Bootstrapy CMS Lastest Multiple SQL Injection via Forum and Contact Modules

Bootstrapy CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through POST parameters. Attackers can inject SQL payloads into the threadid parameter of forum-thread.php, the subject parameter of...

CVE-2019-25642 Bootstrapy CMS Lastest Multiple SQL Injection via Forum and Contact Modules

Bootstrapy CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through POST parameters. Attackers can inject SQL payloads into the threadid parameter of forum-thread.php, the subject parameter of...

CVE-2019-25639

Affected software : Matrimony Website Script M-Plus. Vulnerability : multiple SQL injection flaws allow unauthenticated attackers to manipulate queries by injecting SQL through POST parameters (txtGender, religion, Fage, cboCountry) in pages such as simplesearch_results.php, advsearch_results.php...

CVE-2019-25639 Matrimony Website Script M-Plus Multiple SQL Injection

Matrimony Website Script M-Plus contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code through various POST parameters. Attackers can inject malicious SQL payloads into parameters like txtGender, religion, Fage, an...

CVE-2026-26001

creationtimestamp| type| source ---|---|--- 2026-03-24 11:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhsgb6medg24...

CVE-2026-33252

A flaw was found in the Go MCP SDK's Streamable HTTP transport, which uses Go's standard encoding/json package. In deployments without authorization, a remote attacker can exploit this Cross-Site Request Forgery CSRF vulnerability. By sending browser-generated cross-site POST requests to a local...

Malicious code in @the-coca-cola-company/ngps-global-common-utils (npm)

Malicious post-install script combined with low project popularity indicates potential malware. Arbitrary code execution is a major concern. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebe31c5bb51c354ed83627a02c11ca4c8541e042623b1b987255941ffafdaff The...

MAL-2026-2410 Malicious code in @the-coca-cola-company/ngps-global-common-utils (npm)

Malicious post-install script combined with low project popularity indicates potential malware. Arbitrary code execution is a major concern. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebe31c5bb51c354ed83627a02c11ca4c8541e042623b1b987255941ffafdaff The...

CVE-2026-27115

creationtimestamp| type| source ---|---|--- 2026-03-24 08:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhs5cw3akh2w...

CVE-2026-33852

creationtimestamp| type| source ---|---|--- 2026-03-24 07:16:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhrzrcryj62d 2026-03-24 09:51:37+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mhscghmn3m2o 2026-03-24 10:28:12+00:00| seen|...

CVE-2026-33850

creationtimestamp| type| source ---|---|--- 2026-03-24 07:00:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhryto3hvu2l...

CVE-2026-4745

creationtimestamp| type| source ---|---|--- 2026-03-24 06:48:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhry7uvyye2f 2026-03-24 09:00:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116283331651758120 2026-03-24 09:00:31+00:00| seen|...

CVE-2026-4731

creationtimestamp| type| source ---|---|--- 2026-03-24 06:40:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhrxptxwy62f...

CVE-2026-4640

creationtimestamp| type| source ---|---|--- 2026-03-24 05:25:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhrtk7qoca2a 2026-03-24 07:01:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhrywm3tqo2g 2026-06-11 00:37:06+00:00| seen|...

CVE-2026-3079

creationtimestamp| type| source ---|---|--- 2026-03-24 04:29:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhrqh4lfz22g...

CVE-2026-4623

creationtimestamp| type| source ---|---|--- 2026-03-24 04:24:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhrq665z2c2i...

CVE-2026-4738

creationtimestamp| type| source ---|---|--- 2026-03-24 03:17:29+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4738 2026-03-24 07:18:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhrztxgbz72x...

CVE-2026-4680

creationtimestamp| type| source ---|---|--- 2026-03-24 01:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260324 2026-03-24 01:30:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhrggqvp2g24 2026-03-24 02:13:12+00:00|...

EUVD-2026-14593

OpenClaw before 2026.3.1 contains an approval bypass vulnerability in system.run where non-path-like argv0 tokens fail to bind executable identity, allowing post-approval executable rebind. Attackers can modify PATH resolution after approval to execute a different binary than the operator approve...