277861 matches found
CVE-2025-68908
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in temash Barberry barberry allows PHP Local File Inclusion.This issue affects Barberry: from n/a through = 2.9.9.87...
CVE-2018-25132
MyBB Trending Widget Plugin 1.2 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through thread titles. Attackers can modify thread titles with script payloads that will execute when other users view the trending widget...
CVE-2025-10856
Unrestricted Upload of File with Dangerous Type vulnerability in Solvera Software Services Trade Inc. Teknoera allows File Content Injection.This issue affects Teknoera: through 01102025...
CVE-2026-24538
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in omnipressteam Omnipress omnipress allows PHP Local File Inclusion.This issue affects Omnipress: from n/a through = 1.6.7...
CVE-2025-4320
Authentication Bypass by Primary Weakness, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Birebirsoft Software and Technology Solutions Sufirmam allows Authentication Bypass, Password Recovery Exploitation. This issue affects Sufirmam: through 23012026. NOTE: The vendor...
CVE-2025-4319
Improper Restriction of Excessive Authentication Attempts, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Birebirsoft Software and Technology Solutions Sufirmam allows Brute Force, Password Recovery Exploitation. This issue affects Sufirmam: through 23012026. NOTE: The...
CVE-2025-4320
Authentication Bypass by Primary Weakness, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Birebirsoft Software and Technology Solutions Sufirmam allows Authentication Bypass, Password Recovery Exploitation. This issue affects Sufirmam: through 23012026. NOTE: The vendor...
CVE-2025-4320 Information Disclosure in Birebirsoft's Sufirmam
Authentication Bypass by Primary Weakness, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Birebirsoft Software and Technology Solutions Sufirmam allows Authentication Bypass, Password Recovery Exploitation.This issue affects Sufirmam: through 23012026. NOTE: The vendor w...
CVE-2025-4320
CVE-2025-4320 concerns an authentication bypass caused by a weak password recovery mechanism in Sufirmam, a product of Birebirsoft Software and Technology Solutions. The issue allows bypass of authentication and potential password-recovery exploitation, affecting Sufirmam through version 23012026...
BELL-CVE-2026-21950 CVE-2026-21950 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-21948 CVE-2026-21948 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-21936 CVE-2026-21936 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-21941 CVE-2026-21941 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-21929 CVE-2026-21929 does not affect BellSoft software
Bulletin has no description...
DEBIAN-CVE-2025-3839
A flaw was found in Epiphany, a tool that allows websites to open external URL handler applications with minimal user interaction. This design can be misused to exploit vulnerabilities within those handlers, making them appear remotely exploitable. The browser fails to properly warn or gate this...
GHSA-R6Q2-HW4H-H46W vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, renovate, sqlpad, code-server, py3-jupyterlab, prism, pnpm-stage0, node-gyp, kubeflow-katib, saf, vitess, lerna, tileserver-gl, pulumi, opensearch-dashboards, kubeflow-centraldashboard...
Malicious code in translation-note (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e07633850d68301541c30e7f731a444071e400f71083928dca6418a9a59c769a The package translation-note was found to contain malicious code. Source: ghsa-malware 95cfe5df95e94bc56327c2241fd1d850ee8bae580cdecfae84ee6f81f09150...
MAL-2026-478 Malicious code in domino-elements (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d29d322166d012b639664f1711c5c9ca4353508a8ffa2e48eb5b7b14bbda296 The package domino-elements was found to contain malicious code...
Malicious code in integromat-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7de4e86762c4fcb7682615925818028501cfb55cdd9fdeaf238f2e186b1f121e The package integromat-ui was found to contain malicious code...
CVE-2026-24138 FOG vulnerable to unauthenticated SSRF via `/fog/service/getversion.php`
FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Versions 1.5.10.1754 and below contain an unauthenticated SSRF vulnerability in getversion.php which can be triggered by providing a user-controlled url parameter. It can be used to fetch both internal websites an...