CVE-2026-6623 BichitroGan ISP Billing Software Profile users-view cross site scripting

A security flaw has been discovered in BichitroGan ISP Billing Software 2025.3.20. This impacts an unknown function of the file /?route=settings/users-view/ of the component Profile Page Handler. Performing a manipulation results in cross site scripting. The attack is possible to be carried out...

CVE-2026-6623

A security flaw has been discovered in BichitroGan ISP Billing Software 2025.3.20. This impacts an unknown function of the file /?route=settings/users-view/ of the component Profile Page Handler. Performing a manipulation results in cross site scripting. The attack is possible to be carried out...

CVE-2026-6623 BichitroGan ISP Billing Software Profile users-view cross site scripting

A security flaw has been discovered in BichitroGan ISP Billing Software 2025.3.20. This impacts an unknown function of the file /?route=settings/users-view/ of the component Profile Page Handler. Performing a manipulation results in cross site scripting. The attack is possible to be carried out...

CVE-2026-39533

creationtimestamp| type| source ---|---|--- 2026-04-20 08:37:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mjw2u3mpop2x...

CVE-2026-6609

creationtimestamp| type| source ---|---|--- 2026-04-20 08:27:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjw2df2y3t2t...

CVE-2026-6600

creationtimestamp| type| source ---|---|--- 2026-04-20 08:08:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvzats44i2o...

CVE-2026-6606

creationtimestamp| type| source ---|---|--- 2026-04-20 07:15:49+00:00| published-proof-of-concept| Telegram/UmvoOoU43UC2jMqfLobJT4zrFIQl61G8LbQOBbZSD5gsLA 2026-04-20 07:42:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvxtd3ieb2e...

CVE-2026-6603

creationtimestamp| type| source ---|---|--- 2026-04-20 07:15:49+00:00| published-proof-of-concept| Telegram/UmvoOoU43UC2jMqfLobJT4zrFIQl61G8LbQOBbZSD5gsLA 2026-04-20 08:19:27+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3mjvzuaeas22y 2026-04-20 08:19:27+00:00| seen|...

CVE-2026-6604

creationtimestamp| type| source ---|---|--- 2026-04-20 07:15:49+00:00| published-proof-of-concept| Telegram/UmvoOoU43UC2jMqfLobJT4zrFIQl61G8LbQOBbZSD5gsLA 2026-04-20 07:53:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvyffzef52p...

CVE-2026-6602

creationtimestamp| type| source ---|---|--- 2026-04-20 05:17:17+00:00| published-proof-of-concept| Telegram/cTJ4Lg1Zeyay-KuZSLE18KcBtUPYEffFV-pgjTOYRDW1Fe8 2026-04-20 07:58:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvyorsogq2p...

CVE-2026-22555

creationtimestamp| type| source ---|---|--- 2026-04-20 05:04:51+00:00| seen| https://bsky.app/profile/vmorecloud.bsky.social/post/3mjvoyk7fjb2y 2026-06-14 20:06:14+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-fhx7-m96w-mv29 2026-07-05 20:01:03+00:0...

CVE-2026-28737

creationtimestamp| type| source ---|---|--- 2026-04-20 05:04:51+00:00| seen| https://bsky.app/profile/vmorecloud.bsky.social/post/3mjvoyk7fjb2y 2026-06-14 20:13:42+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-9cpj-qc93-vw8v 2026-07-05 20:00:48+00:0...

CVE-2026-6593

creationtimestamp| type| source ---|---|--- 2026-04-20 04:38:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvnjj6mm62p...

CVE-2026-6592

creationtimestamp| type| source ---|---|--- 2026-04-20 04:33:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvnakp2dp2v...

CVE-2026-6588

creationtimestamp| type| source ---|---|--- 2026-04-20 04:18:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvmfpdvs52o...

CVE-2026-6584

creationtimestamp| type| source ---|---|--- 2026-04-20 04:07:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvlrd4sob2k...

CVE-2026-6585

creationtimestamp| type| source ---|---|--- 2026-04-20 04:01:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvlh2kdxd2p...

PT-2026-33825

Name of the Vulnerable Software and Affected Versions wpForo Forum versions prior to 3.0.6 Description The plugin is subject to arbitrary file deletion. This occurs because the Members::update method fails to validate or restrict values for file-type custom profile fields, enabling authenticated...

PT-2026-33772

Vvveb prior to 1.0.8.1 contains a privilege escalation vulnerability in the admin user profile save endpoint that allows authenticated users to modify privileged fields on their own profile. Attackers can inject role id=1 into profile save requests to escalate to Super Administrator privileges,...

BichitroGan ISP Billing Software 安全漏洞

BichitroGan ISP Billing Software is an internet service provider billing and customer management system developed by BichitroGan Company in Bangladesh. The version 2025.3.20 of BichitroGan ISP Billing Software contains a security vulnerability. This vulnerability arises from improper handling of...