Lucene search
+L

11778 matches found

Cvelist
Cvelist
added 2026/04/14 12:00 a.m.43 views

CVE-2026-31049

An issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to execute arbitrary code and escalate privileges via the CSV registration field...

0.00661EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/04/14 12:00 a.m.9 views

CVE-2026-31049

An issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to execute arbitrary code and escalate privileges via the CSV registration field...

6.2AI score0.00661EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/04/14 12:00 a.m.13 views

Hostbill 安全漏洞

Hostbill is a server hosting and cloud automation management system developed by the Polish company Hostbill. Both the Hostbill 2025-11-24 version and the 2025-12-01 version contain security vulnerabilities. These vulnerabilities stem from issues with the CSV registration fields, which could allo...

9.8CVSS6.2AI score0.00661EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/04/14 12:00 a.m.13 views

PT-2026-32626

CVE-2026-31049 An issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to execute arbitrary code and escalate privileges via the CSV registration field https://t.co/61GJ7ryb1N...

9.8CVSS6.2AI score0.00661EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
added 2026/04/13 11:26 p.m.15 views

SUSE CVE-2026-31425

In the Linux kernel, the following vulnerability has been resolved: rds: ib: reject FRMR registration before IB connection is established rdsibgetmr extracts the rdsibconnection from conn-ctransportdata and passes it to rdsibregfrmr for FRWR memory registration. On a fresh outgoing connection, ic...

5.5CVSS5.7AI score0.00114EPSS
SaveExploits0References17
NVD
NVD
added 2026/04/13 11:16 p.m.15 views

CVE-2026-6203

The User Registration & Membership plugin for WordPress is vulnerable to Open Redirect in versions up to and including 5.1.4. This is due to insufficient validation of user-supplied URLs passed via the 'redirecttoonlogout' GET parameter before redirecting users. The redirecttoonlogout GET paramet...

6.1CVSS0.00663EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/13 10:25 p.m.9 views

CVE-2026-6203

The User Registration & Membership plugin for WordPress is vulnerable to Open Redirect in versions up to and including 5.1.4. This is due to insufficient validation of user-supplied URLs passed via the 'redirecttoonlogout' GET parameter before redirecting users. The redirecttoonlogout GET paramet...

6.1CVSS5.7AI score0.00663EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/04/13 10:25 p.m.4 views

CVE-2026-6203 User Registration & Membership <= 5.1.4 - Unauthenticated Open Redirect via 'redirect_to_on_logout' Parameter

The User Registration & Membership plugin for WordPress is vulnerable to Open Redirect in versions up to and including 5.1.4. This is due to insufficient validation of user-supplied URLs passed via the 'redirecttoonlogout' GET parameter before redirecting users. The redirecttoonlogout GET paramet...

6.1CVSS5.7AI score0.00663EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/04/13 10:25 p.m.36 views

CVE-2026-6203 User Registration & Membership <= 5.1.4 - Unauthenticated Open Redirect via 'redirect_to_on_logout' Parameter

The User Registration & Membership plugin for WordPress is vulnerable to Open Redirect in versions up to and including 5.1.4. This is due to insufficient validation of user-supplied URLs passed via the 'redirecttoonlogout' GET parameter before redirecting users. The redirecttoonlogout GET paramet...

6.1CVSS0.00663EPSS
SaveExploits0References3
CVE
CVE
added 2026/04/13 10:25 p.m.37 views

CVE-2026-6203

The CVE-2026-6203 entry concerns the WordPress plugin User Registration & Membership (versions up to and including 5.1.4). The vulnerability is an unauthenticated open redirect triggered via the redirect_to_on_logout GET parameter. The issue arises because the parameter is passed directly to Word...

6.1CVSS5.7AI score0.00663EPSS
SaveExploits0References3
NVD
NVD
added 2026/04/13 7:16 p.m.23 views

CVE-2026-40041

Pachno 1.0.6 contains a cross-site request forgery vulnerability that allows attackers to perform arbitrary actions in authenticated user context by exploiting missing CSRF protections on state-changing endpoints. Attackers can craft malicious requests targeting login, registration, file upload,...

5.3CVSS0.00109EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2026/04/13 6:10 p.m.8 views

CVE-2026-40041

Pachno 1.0.6 contains a cross-site request forgery vulnerability that allows attackers to perform arbitrary actions in authenticated user context by exploiting missing CSRF protections on state-changing endpoints. Attackers can craft malicious requests targeting login, registration, file upload,...

5.3CVSS5.8AI score0.00109EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2026/04/13 6:10 p.m.39 views

CVE-2026-40041

CVE-2026-40041 affects Pachno 1.0.6 and describes a cross-site request forgery (CSRF) vulnerability arising from missing CSRF protections on state-changing endpoints. Attackers can craft requests that execute actions in an authenticated user context via attacker-controlled sites, targeting login,...

5.3CVSS5.8AI score0.00109EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2026/04/13 6:10 p.m.29 views

CVE-2026-40041 Pachno 1.0.6 Cross-Site Request Forgery via State-Changing Endpoints

Pachno 1.0.6 contains a cross-site request forgery vulnerability that allows attackers to perform arbitrary actions in authenticated user context by exploiting missing CSRF protections on state-changing endpoints. Attackers can craft malicious requests targeting login, registration, file upload,...

5.3CVSS0.00109EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/04/13 6:10 p.m.4 views

CVE-2026-40041 Pachno 1.0.6 Cross-Site Request Forgery via State-Changing Endpoints

Pachno 1.0.6 contains a cross-site request forgery vulnerability that allows attackers to perform arbitrary actions in authenticated user context by exploiting missing CSRF protections on state-changing endpoints. Attackers can craft malicious requests targeting login, registration, file upload,...

5.3CVSS5.8AI score0.00109EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2026/04/13 5:26 p.m.11 views

CVE-2026-31420

A flaw was found in the Linux kernel's bridge subsystem, specifically within the Multiple Registration Protocol MRP implementation. A local user can exploit this vulnerability by supplying a zero-value test interval through the netlink interface without proper validation. This invalid input cause...

5.5CVSS5.8AI score0.00091EPSS
SaveExploits0References4
GithubExploit
GithubExploit
added 2026/04/13 4:49 p.m.120 views

Stored-Cross-Site-Scripting-XSS-in-Donor-Registration-Leading-to-Admin-Session-Hijacking

Stored XSS in BloodBank Managing System — Donor Registration...

5.9AI score
SaveExploits0
EUVD
EUVD
added 2026/04/13 3:31 p.m.7 views

EUVD-2026-21950

In the Linux kernel, the following vulnerability has been resolved: rds: ib: reject FRMR registration before IB connection is established rdsibgetmr extracts the rdsibconnection from conn-ctransportdata and passes it to rdsibregfrmr for FRWR memory registration. On a fresh outgoing connection, ic...

5.7AI score0.00114EPSS
SaveExploits0References7
NVD
NVD
added 2026/04/13 2:16 p.m.11 views

CVE-2026-31425

In the Linux kernel, the following vulnerability has been resolved: rds: ib: reject FRMR registration before IB connection is established rdsibgetmr extracts the rdsibconnection from conn-ctransportdata and passes it to rdsibregfrmr for FRWR memory registration. On a fresh outgoing connection, ic...

5.5CVSS0.00114EPSS
SaveExploits0References8
OSV
OSV
added 2026/04/13 2:16 p.m.10 views

UBUNTU-CVE-2026-31425

In the Linux kernel, the following vulnerability has been resolved: rds: ib: reject FRMR registration before IB connection is established rdsibgetmr extracts the rdsibconnection from conn-ctransportdata and passes it to rdsibregfrmr for FRWR memory registration. On a fresh outgoing connection, ic...

5.5CVSS5.7AI score0.00114EPSS
SaveExploits0References29
Rows per page
Query Builder