24882 matches found
CVE-2024-13619
creationtimestamp| type| source ---|---|--- 2026-02-12 21:03:24+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3meovce55yb2s...
CVE-2026-26217
creationtimestamp| type| source ---|---|--- 2026-02-12 16:00:18+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3meoeev3veh2u 2026-02-12 16:00:20+00:00| seen| https://infosec.exchange/users/offseq/statuses/116058489848351725 2026-02-13 09:23:33+00:00| seen|...
CVE-2026-20610
creationtimestamp| type| source ---|---|--- 2026-02-12 15:51:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meodv6xbit2a 2026-02-13 06:02:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116061800413108625 2026-02-13 11:54:30+00:00| seen|...
CVE-2026-2004
creationtimestamp| type| source ---|---|--- 2026-02-12 14:18:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meo6oqlkf72h 2026-02-13 15:05:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3meqrrhko4d2m 2026-02-18 23:09:27+00:00| seen|...
CVE-2025-39839
creationtimestamp| type| source ---|---|--- 2026-02-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-06 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...
CVE-2025-15400
The OpenPix for WooCommerce WordPress plugin through 2.13.3 allows any authenticated user to trigger AJAX actions that reset payment gateway configuration options without capability or nonce checks. This permits any authenticated users, such as subscribers to clear API credentials and webhook...
CVE-2026-20609
creationtimestamp| type| source ---|---|--- 2026-02-12 05:23:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116055984470118971...
CVE-2026-2391
creationtimestamp| type| source ---|---|--- 2026-02-12 04:39:47+00:00| published-proof-of-concept| https://github.com/ljharb/qs/security/advisories/GHSA-w7fw-mjwx-w883 2026-02-12 17:40:24+00:00| seen| https://gist.github.com/alon710/c6963cc90ba7a2a5c311d6e3cd8e6558 2026-02-19 12:48:01+00:00| seen...
GHSA-9F3F-WV7R-QC8R
creationtimestamp| type| source ---|---|--- 2026-02-12 02:40:05+00:00| seen| https://gist.github.com/alon710/3a12f0f5fd4b6863fd1cb17756a47aa1...
SUSE CVE-2026-21965
unknown...
GHSA-GWMX-9GCJ-332H
creationtimestamp| type| source ---|---|--- 2026-02-12 00:10:05+00:00| seen| https://gist.github.com/alon710/41968f4cd423a2eb06975ee5587fe1d5...
GHSA-FF9R-WW9C-43X8
creationtimestamp| type| source ---|---|--- 2026-02-11 23:40:05+00:00| seen| https://gist.github.com/alon710/b5bcbf27e83e870132cea62ff4e8259e...
GHSA-M4G2-2Q66-VC9V
creationtimestamp| type| source ---|---|--- 2026-02-11 23:10:05+00:00| seen| https://gist.github.com/alon710/7c1594c342afa1e0cba4cf7371023f4c...
GHSA-7PPG-37FH-VCR6
creationtimestamp| type| source ---|---|--- 2026-02-11 22:40:05+00:00| seen| https://gist.github.com/alon710/5cd6606175d5ceb9195cb6dbaed696ec...
CVE-2020-37173
AVideo Platform 8.1 contains an information disclosure vulnerability that allows attackers to enumerate user details through the playlistsFromUser.json.php endpoint. Attackers can retrieve sensitive user information including email, password hash, and administrative status by manipulating the...
CVE-2020-37173
AVideo Platform 8.1 contains an information disclosure vulnerability that allows attackers to enumerate user details through the playlistsFromUser.json.php endpoint. Attackers can retrieve sensitive user information including email, password hash, and administrative status by manipulating the...
CVE-2020-37173
AVideo Platform 8.1 contains an information disclosure vulnerability that allows attackers to enumerate user details through the playlistsFromUser.json.php endpoint. Attackers can retrieve sensitive user information including email, password hash, and administrative status by manipulating the...
CVE-2020-37173 AVideo Platform 8.1 - Information Disclosure (User Enumeration)
AVideo Platform 8.1 contains an information disclosure vulnerability that allows attackers to enumerate user details through the playlistsFromUser.json.php endpoint. Attackers can retrieve sensitive user information including email, password hash, and administrative status by manipulating the...
CVE-2026-26003
FastGPT is an AI Agent building platform. From 4.14.0 to 4.14.5, attackers can directly access the plugin system through FastGPT/api/plugin/xxx without authentication, thereby threatening the plugin system. This may cause the plugin system to crash and the loss of plugin installation status, but ...