23319 matches found
CVE-2026-40325
creationtimestamp| type| source ---|---|--- 2026-05-07 01:53:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mla4a22fht2n...
CVE-2026-40171
creationtimestamp| type| source ---|---|--- 2026-05-07 01:37:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mla3darxz22t...
CVE-2026-4650
creationtimestamp| type| source ---|---|--- 2026-05-07 01:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mla33keb5f2h...
CVE-2026-36388
A Cross-Site Scripting XSS vulnerability was found in PHPGurukal Hospital Management System v4.0 in the /hospital/hms/edit-profile.php page. This flaw allows an authenticated attacker patient to inject a malicious script payload into the User Name parameter, which is stored in the application and...
PT-2026-38450
A Cross-Site Scripting XSS vulnerability was found in PHPGurukal Hospital Management System v4.0 in the /hospital/hms/edit-profile.php page. This flaw allows an authenticated attacker patient to inject a malicious script payload into the User Name parameter, which is stored in the application and...
CVE-2026-36388
A Cross-Site Scripting XSS vulnerability was found in PHPGurukal Hospital Management System v4.0 in the /hospital/hms/edit-profile.php page. This flaw allows an authenticated attacker patient to inject a malicious script payload into the User Name parameter, which is stored in the application and...
PHPGurukul Hospital Management System 跨站脚本漏洞
PHPGurukul Hospital Management System is a hospital management system developed by PHPGurukul company, based on PHP and MySQL technologies. The PHPGurukul Hospital Management System v4.0 version has a cross-site scripting vulnerability. This vulnerability stems from the...
CVE-2026-36388
PHPGurukal Hospital Management System v4.0 contains a stored XSS flaw in /hospital/hms/edit-profile.php. An authenticated patient can inject a script via the User Name field, which is stored and later rendered in the doctor interface. The vulnerability is caused by unsanitized input being stored ...
Admidio 信息泄露漏洞
Admidio is a set of open-source member management systems developed by the Admidio team. This system supports features such as member lists, event management, message boards, photo albums, and downloads. Prior to Admidio 5.0.9, there was a vulnerability involving information leakage. This...
CVE-2026-36388
A Cross-Site Scripting XSS vulnerability was found in PHPGurukal Hospital Management System v4.0 in the /hospital/hms/edit-profile.php page. This flaw allows an authenticated attacker patient to inject a malicious script payload into the User Name parameter, which is stored in the application and...
CVE-2026-44112
creationtimestamp| type| source ---|---|--- 2026-05-06 21:59:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7p6ipcm52v 2026-05-16 17:08:21+00:00| seen| https://bsky.app/profile/cerberusit.bsky.social/post/3mlydgxylsw2s 2026-05-16 23:10:43+00:00| seen|...
CVE-2026-43579
creationtimestamp| type| source ---|---|--- 2026-05-06 21:47:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7ohf6vsu2q...
CVE-2026-44113
creationtimestamp| type| source ---|---|--- 2026-05-06 21:44:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7octvlei2p 2026-05-19 18:30:06+00:00| seen| https://t.me/truesecator/8221...
EUVD-2026-28170
OpenClaw before 2026.4.10 contains an insufficient access control vulnerability in Nostr plugin HTTP profile routes that allows operators with write permissions to persist profile configuration without requiring admin authority. Attackers with operator.write scope can modify Nostr profile setting...
CVE-2026-41936
creationtimestamp| type| source ---|---|--- 2026-05-06 20:46:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7l2uurfe2n...
CVE-2026-46366
creationtimestamp| type| source ---|---|--- 2026-05-06 20:45:01+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-99qv-g4x9-mgc3 2026-05-15 21:44:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlwcjmu7ci2n 2026-05-16 15:00:22+00:00| seen|...
CVE-2026-44110
creationtimestamp| type| source ---|---|--- 2026-05-06 20:43:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7kuxuy7f2k 2026-05-06 22:14:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7pyc3rbz2c 2026-05-08 10:07:08+00:00| seen|...
CVE-2026-44118
creationtimestamp| type| source ---|---|--- 2026-05-06 20:39:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7kotwoxb2z 2026-05-06 22:30:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7qv4ohew2q 2026-05-19 18:30:06+00:00| seen|...
CVE-2026-4024
creationtimestamp| type| source ---|---|--- 2026-05-06 20:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3ml7kd4zsiu2u...
CVE-2026-43579
OpenClaw before 2026.4.10 contains an insufficient access control vulnerability in Nostr plugin HTTP profile routes that allows operators with write permissions to persist profile configuration without requiring admin authority. Attackers with operator.write scope can modify Nostr profile setting...