23342 matches found
Oracle PeopleSoft Enterprise HCM Human Resources 安全漏洞
Oracle PeopleSoft Enterprise HCM Human Resources is a human resources management system developed by Oracle Corporation. Version 9.2 of Oracle PeopleSoft Enterprise HCM Human Resources contains a security vulnerability. This vulnerability stems from issues with the Job Profile Manager component,...
PT-2026-34104
Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft component: Job Profile Manager. The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft...
PT-2026-34194
nesquena hermes-webui contains an environment variable leakage vulnerability where profile switching does not clear environment variables from the previously active profile before loading the next profile. Attackers or users can exploit additive dotenv reload behavior to access provider API keys...
blueprintUE self-hosted edition 安全漏洞
The blueprintUE self-hosted edition is an open-source data modeling and visualization tool developed by blueprintUE. Versions prior to blueprintUE self-hosted edition 4.2.0 contained security vulnerabilities. These vulnerabilities stemmed from the password change form located at...
CVE-2026-29648
creationtimestamp| type| source ---|---|--- 2026-04-20 22:43:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxk5zonx22p...
CVE-2026-6249
creationtimestamp| type| source ---|---|--- 2026-04-20 20:23:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjxcdboxxr2c 2026-04-20 21:22:19+00:00| published-proof-of-concept| Telegram/OLcxrKJ5zAhCDZ5T6GCelVBzr2kWns3QejwnSLKnpZyw...
CVE-2026-39109
creationtimestamp| type| source ---|---|--- 2026-04-20 20:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjxb2tnbmy2r...
CVE-2026-6248
creationtimestamp| type| source ---|---|--- 2026-04-20 20:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjxb2ls3i62n 2026-04-20 21:22:08+00:00| seen| Telegram/afpqx5U4BmLApg0vDDGxSmW2u1LMTzTENI3LCYVeeaEOYCo...
CVE-2026-23756
creationtimestamp| type| source ---|---|--- 2026-04-20 19:38:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjx7sl7cmh2p...
CVE-2026-39111
creationtimestamp| type| source ---|---|--- 2026-04-20 18:40:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjx4knunme2c...
EUVD-2026-23850
Vvveb prior to 1.0.8.1 contains a privilege escalation vulnerability in the admin user profile save endpoint that allows authenticated users to modify privileged fields on their own profile. Attackers can inject roleid=1 into profile save requests to escalate to Super Administrator privileges,...
CVE-2026-6248 wpForo Forum <= 3.0.5 - Authenticated (Subscriber+) Arbitrary File Deletion via Custom Profile Field File Path
The wpForo Forum plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to and including 3.0.5. This is due to two compounding flaws: the Members::update method does not validate or restrict the value of file-type custom profile fields, allowing authenticated users to store ...
CVE-2026-6248
The CVE-2026-6248 entry concerns the wpForo Forum plugin for WordPress (versions up to 3.0.5) and describes an Arbitrary File Deletion vulnerability. Root cause: two flaws allow an authenticated user with subscriber-level access to delete arbitrary server files via a crafted file-type custom prof...
CVE-2026-6248 wpForo Forum <= 3.0.5 - Authenticated (Subscriber+) Arbitrary File Deletion via Custom Profile Field File Path
The wpForo Forum plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to and including 3.0.5. This is due to two compounding flaws: the Members::update method does not validate or restrict the value of file-type custom profile fields, allowing authenticated users to store ...
CVE-2026-3219
creationtimestamp| type| source ---|---|--- 2026-04-20 16:16:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjwukdmbem2p 2026-04-20 19:34:11+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mjx7l2ighx2h 2026-05-21 12:01:00+00:00| seen|...
CVE-2026-34427
Vvveb prior to 1.0.8.1 contains a privilege escalation vulnerability in the admin user profile save endpoint that allows authenticated users to modify privileged fields on their own profile. Attackers can inject roleid=1 into profile save requests to escalate to Super Administrator privileges,...
CVE-2026-39386
creationtimestamp| type| source ---|---|--- 2026-04-20 16:16:06+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-39386 2026-04-21 01:37:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjxttvn7zx2z 2026-04-21 03:03:57+00:00| seen|...
CVE-2026-39378
creationtimestamp| type| source ---|---|--- 2026-04-20 16:16:06+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-39378 2026-04-21 02:31:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxwvtauhz2r...
CVE-2026-39396
creationtimestamp| type| source ---|---|--- 2026-04-20 16:16:06+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-39396 2026-04-21 02:34:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxx2pmzd42h...