Code-Projects Student Web Portal SQL注入漏洞

Code-Projects Student Web Portal is an open-source student portal developed by Code-Projects. Version 1.0 of the Code-Projects Student Web Portal contains a SQL injection vulnerability, which stems from the handling of the User parameter in the profile.php file, potentially leading to SQL injecti...

PT-2026-41162

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.8.0 Description The profile image url field on the user profile update form accepts arbitrary data: URI values without MIME-type validation, leading to Cross-Site Scripting XSS. This occurs because the applicatio...

SourceCodester Web-based Pharmacy Product Management System 代码注入漏洞

SourceCodester Web-based Pharmacy Product Management System is an open-source web-based pharmacy product management system developed by SourceCodester. Version 1.0 of the SourceCodester Web-based Pharmacy Product Management System contains a code injection vulnerability. This vulnerability stems...

CVE-2026-3670

creationtimestamp| type| source ---|---|--- 2026-03-07 18:15:49+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3670 2026-03-07 21:29:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgirifcq7n2k...

CVE-2026-30863

creationtimestamp| type| source ---|---|--- 2026-03-07 16:15:54+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-30863 2026-03-07 19:26:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgiknccezp2y 2026-03-08 04:00:29+00:00| seen|...

CVE-2026-29192

creationtimestamp| type| source ---|---|--- 2026-03-07 15:37:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgi5u3mda52c...

CVE-2026-29186

creationtimestamp| type| source ---|---|--- 2026-03-07 15:17:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgi4ovd36o2v...

CVE-2026-28476

creationtimestamp| type| source ---|---|--- 2026-03-07 12:07:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mghs2yjb5l2d...

CVE-2026-26018

creationtimestamp| type| source ---|---|--- 2026-03-07 11:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mghoegdkt62f 2026-03-07 11:17:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mghpcawlie2n 2026-03-16 00:00:00+00:00| seen|...

CVE-2026-1071

creationtimestamp| type| source ---|---|--- 2026-03-07 09:53:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mghkmpxojd27...

CVE-2026-1073

creationtimestamp| type| source ---|---|--- 2026-03-07 09:20:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mghirnto3b2u...

CVE-2026-2722

creationtimestamp| type| source ---|---|--- 2026-03-07 03:52:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mggwgp667324...

CVE-2026-2721

creationtimestamp| type| source ---|---|--- 2026-03-07 03:28:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mggv37wbek27...

CVE-2026-2020

creationtimestamp| type| source ---|---|--- 2026-03-07 03:21:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgguojnwgn2e 2026-03-07 08:15:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mghf4uyagj25 2026-03-07 08:15:56+00:00| seen|...

CVE-2026-25072

creationtimestamp| type| source ---|---|--- 2026-03-07 03:08:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mggtxpxuoi2y...

CVE-2025-14353

creationtimestamp| type| source ---|---|--- 2026-03-07 03:02:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mggtnmaqmu2x 2026-03-07 04:20:41+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mggxz3abjs2n 2026-03-07 08:16:04+00:00| seen|...

CVE-2026-28450

OpenClaw versions prior to 2026.2.12 with the optional Nostr plugin enabled expose unauthenticated HTTP endpoints at /api/channels/nostr/:accountId/profile and /api/channels/nostr/:accountId/profile/import that allow reading and modifying Nostr profiles without gateway authentication. Remote...

EUVD-2026-10089

The WP Frontend Profile plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.8. This is due to missing nonce validation on the 'updateaction' function. This makes it possible for unauthenticated attackers to approve or reject user account...

WordPress WP Frontend Profile plugin <= 1.3.8 - Cross-Site Request Forgery to Unauthorized User Account Approval or Rejection vulnerability

Cross-Site Request Forgery to Unauthorized User Account Approval or Rejection vulnerability discovered by johska in WordPress Plugin WP Frontend Profile versions = 1.3.8...

WordPress plugin WP Frontend Profile 跨站请求伪造漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...