GHSA-XX7M-69FF-9CRP

creationtimestamp| type| source ---|---|--- 2026-02-13 01:10:24+00:00| seen| https://gist.github.com/alon710/db853e0a605e11003bf240d589bebc01 2026-02-13 02:07:34+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mepgcmwkc6o2...

CVE-2024-13619

creationtimestamp| type| source ---|---|--- 2026-02-12 21:03:24+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3meovce55yb2s...

CVE-2026-26217

creationtimestamp| type| source ---|---|--- 2026-02-12 16:00:18+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3meoeev3veh2u 2026-02-12 16:00:20+00:00| seen| https://infosec.exchange/users/offseq/statuses/116058489848351725 2026-02-13 09:23:33+00:00| seen|...

CVE-2026-20610

creationtimestamp| type| source ---|---|--- 2026-02-12 15:51:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meodv6xbit2a 2026-02-13 06:02:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116061800413108625 2026-02-13 11:54:30+00:00| seen|...

CVE-2026-2004

creationtimestamp| type| source ---|---|--- 2026-02-12 14:18:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meo6oqlkf72h 2026-02-13 15:05:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3meqrrhko4d2m 2026-02-18 23:09:27+00:00| seen|...

CVE-2025-39839

creationtimestamp| type| source ---|---|--- 2026-02-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-06 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...

CVE-2025-15400

The OpenPix for WooCommerce WordPress plugin through 2.13.3 allows any authenticated user to trigger AJAX actions that reset payment gateway configuration options without capability or nonce checks. This permits any authenticated users, such as subscribers to clear API credentials and webhook...

CVE-2026-20609

creationtimestamp| type| source ---|---|--- 2026-02-12 05:23:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116055984470118971...

CVE-2026-2391

creationtimestamp| type| source ---|---|--- 2026-02-12 04:39:47+00:00| published-proof-of-concept| https://github.com/ljharb/qs/security/advisories/GHSA-w7fw-mjwx-w883 2026-02-12 17:40:24+00:00| seen| https://gist.github.com/alon710/c6963cc90ba7a2a5c311d6e3cd8e6558 2026-02-19 12:48:01+00:00| seen...

GHSA-9F3F-WV7R-QC8R

creationtimestamp| type| source ---|---|--- 2026-02-12 02:40:05+00:00| seen| https://gist.github.com/alon710/3a12f0f5fd4b6863fd1cb17756a47aa1...

SUSE CVE-2026-21965

unknown...

GHSA-GWMX-9GCJ-332H

creationtimestamp| type| source ---|---|--- 2026-02-12 00:10:05+00:00| seen| https://gist.github.com/alon710/41968f4cd423a2eb06975ee5587fe1d5...

GHSA-FF9R-WW9C-43X8

creationtimestamp| type| source ---|---|--- 2026-02-11 23:40:05+00:00| seen| https://gist.github.com/alon710/b5bcbf27e83e870132cea62ff4e8259e...

GHSA-M4G2-2Q66-VC9V

creationtimestamp| type| source ---|---|--- 2026-02-11 23:10:05+00:00| seen| https://gist.github.com/alon710/7c1594c342afa1e0cba4cf7371023f4c...

GHSA-7PPG-37FH-VCR6

creationtimestamp| type| source ---|---|--- 2026-02-11 22:40:05+00:00| seen| https://gist.github.com/alon710/5cd6606175d5ceb9195cb6dbaed696ec...

CVE-2020-37173

AVideo Platform 8.1 contains an information disclosure vulnerability that allows attackers to enumerate user details through the playlistsFromUser.json.php endpoint. Attackers can retrieve sensitive user information including email, password hash, and administrative status by manipulating the...

CVE-2020-37173

AVideo Platform 8.1 contains an information disclosure vulnerability that allows attackers to enumerate user details through the playlistsFromUser.json.php endpoint. Attackers can retrieve sensitive user information including email, password hash, and administrative status by manipulating the...

CVE-2020-37173 AVideo Platform 8.1 - Information Disclosure (User Enumeration)

AVideo Platform 8.1 contains an information disclosure vulnerability that allows attackers to enumerate user details through the playlistsFromUser.json.php endpoint. Attackers can retrieve sensitive user information including email, password hash, and administrative status by manipulating the...

CVE-2020-37173

AVideo Platform 8.1 contains an information disclosure vulnerability that allows attackers to enumerate user details through the playlistsFromUser.json.php endpoint. Attackers can retrieve sensitive user information including email, password hash, and administrative status by manipulating the...

CVE-2026-26003

FastGPT is an AI Agent building platform. From 4.14.0 to 4.14.5, attackers can directly access the plugin system through FastGPT/api/plugin/xxx without authentication, thereby threatening the plugin system. This may cause the plugin system to crash and the loss of plugin installation status, but ...