23395 matches found
CVE-2026-36874
creationtimestamp| type| source ---|---|--- 2026-04-13 14:53:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjf4n3heli2m...
CVE-2026-34884
creationtimestamp| type| source ---|---|--- 2026-04-13 14:50:37+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mjf4hkhypo2e 2026-08-19 13:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtgur4a6uc2p...
CVE-2026-36922
creationtimestamp| type| source ---|---|--- 2026-04-13 14:43:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjf426bdtl2r...
CVE-2026-3830
creationtimestamp| type| source ---|---|--- 2026-04-13 14:33:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjf3j5oqc62u...
CVE-2026-4810
creationtimestamp| type| source ---|---|--- 2026-04-13 11:12:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjeqcapg6m2r 2026-04-13 11:15:29+00:00| published-proof-of-concept| Telegram/fSDxF1W-oA5l6tgQa9ar4bEO6UgKzKht9blWdgmI3wf0 2026-04-14 17:25:07+00:00| seen|...
CVE-2026-6161
creationtimestamp| type| source ---|---|--- 2026-04-13 07:18:01+00:00| published-proof-of-concept| Telegram/WZFVHGgaKyJ7TxaSM0HnzDZsEpM2ufMQ-E7g3YgMqDv7PE 2026-04-13 07:52:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjef32y5xp2r...
CVE-2026-25205
creationtimestamp| type| source ---|---|--- 2026-04-13 05:45:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mje5zn6par27 2026-04-13 07:18:01+00:00| published-proof-of-concept| Telegram/WZFVHGgaKyJ7TxaSM0HnzDZsEpM2ufMQ-E7g3YgMqDv7PE...
CVE-2026-6149
creationtimestamp| type| source ---|---|--- 2026-04-13 03:17:09+00:00| seen| Telegram/NukICWx4pspraCJ3uziEkNKObfKzRFcWqJj3ldZd0bxdWP8 2026-04-13 05:35:30+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mje5gwihtq2c...
PHPGurukul Online Course Registration 安全漏洞
PHPGurukul Online Course Registration is an online course registration system provided by PHPGurukul Inc. Version 3.1 of PHPGurukul Online Course Registration contains a security vulnerability, which stems from the arbitrary file upload vulnerability present in the personal profile image upload...
📄 ChurchCRM Cross Site Scripting
ChurchCRM versions 6.5.2 and below suffer from a persistent cross site scripting vulnerability in the person property assignment functionality. Note that the advisory says versions 6.3.0 and below are affected but the CVE entry states versions prior to 6.5.3. CVE-2025-67875: ChurchCRM has stored...
CVE-2025-51414
In Phpgurukul Online Course Registration v3.1, an arbitrary file upload vulnerability was discovered within the profile picture upload functionality on the /my-profile.php page...
CVE-2025-51414
In Phpgurukul Online Course Registration v3.1, an arbitrary file upload vulnerability was discovered within the profile picture upload functionality on the /my-profile.php page...
CVE-2025-51414
In Phpgurukul Online Course Registration v3.1, an arbitrary file upload vulnerability was discovered within the profile picture upload functionality on the /my-profile.php page...
CVE-2025-63743
Cross-Site Scripting vulnerability in the Snipe-IT web-based asset management system v8.3.0 to up and including v8.3.1 allows authenticated attacker with lowest privileges sufficient only to log in, to inject arbitrary JavaScript code via "Name" and "Surname" fields. The JavaScript code is execut...
CVE-2025-63743
Snipe-IT web-based asset management system (v8.3.0–v8.3.1) is affected by an authenticated stored XSS: an attacker with login privileges can inject JavaScript via the Name/Surname fields, executed when the Activity Report or a profile is viewed if Display Name is not set. The issue is fixed in v8...
CVE-2025-51414
Phpgurukul Online Course Registration v3.1 is affected by an arbitrary file upload vulnerability in the profile picture upload at /my-profile.php. The CVE details indicate a high-severity issue (CVSS 3.1: 8.8) with network access and low attacker/authentication requirements, enabling total impact...
PT-2026-32514
Name of the Vulnerable Software and Affected Versions Phpgurukul Online Course Registration version 3.1 Description An arbitrary file upload issue exists within the profile picture upload functionality on the '/my-profile.php' page. Recommendations At the moment, there is no information about a...
CVE-2025-63743
Cross-Site Scripting vulnerability in the Snipe-IT web-based asset management system v8.3.0 to up and including v8.3.1 allows authenticated attacker with lowest privileges sufficient only to log in, to inject arbitrary JavaScript code via "Name" and "Surname" fields. The JavaScript code is execut...
CVE-2026-6130
creationtimestamp| type| source ---|---|--- 2026-04-12 23:15:15+00:00| published-proof-of-concept| Telegram/hilS-ssmivi8q1jRkIVKk8g--dsfivFEr3ZeZAGEjyA5lds 2026-04-13 02:02:23+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mjdrjtah7c2r 2026-06-13 15:00:07+00:00|...