CVE-2026-52785 OpenProject: SQL injection in timestamps functionality

OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, there is a SQL injection in timestamps functionality. OpenProject baseline comparison allows callers to request historic work-package attributes using the timestamps parameter. This vulnerability is fix...

CVE-2025-33053

creationtimestamp| type| source ---|---|--- 2025-06-10 15:24:53+00:00| seen| https://www.thezdi.com/blog/2025/6/10/the-june-2025-security-update-review 2025-06-10 17:10:39+00:00| seen| https://bsky.app/profile/campuscodi.risky.biz/post/3lrbf5cv7ys2h 2025-06-10 17:32:28+00:00| seen|...

CVE-2025-26916

creationtimestamp| type| source ---|---|--- 2025-03-10 15:40:13+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3ljzv6vfnc32b 2025-03-10 15:40:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljzv7jqdfe2h 2025-03-10 15:56:38+00:00| seen|...

CVE-2025-27268

creationtimestamp| type| source ---|---|--- 2025-03-03 15:49:00+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114099286010046432 2025-03-03 18:03:41+00:00| seen| https://t.me/cvedetector/19362 2025-03-04 00:00:12+00:00| seen|...

CVE-2024-20481

creationtimestamp| type| source ---|---|--- 2024-10-23 20:45:10+00:00| seen| https://t.me/cvedetector/8753 2024-10-24 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1406 2024-10-24 07:49:12+00:00| seen| https://t.me/CyberBulletin/1245 2024-10-24 07:49:12+00:00| seen|...

CVE-2023-50917

creationtimestamp| type| source ---|---|--- 2023-12-18 01:20:19+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6219 2023-12-19 23:23:25+00:00| seen| https://t.me/ctinow/156650 2023-12-20 11:00:39+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9620...

CVE-2023-21554

creationtimestamp| type| source ---|---|--- 2023-04-11 21:23:37+00:00| published-proof-of-concept| https://t.me/arvinclub1/15 2023-04-12 14:53:28+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1005 2023-04-12 21:51:51+00:00| published-proof-of-concept|...

CVE-2022-31660

creationtimestamp| type| source ---|---|--- 2022-08-03 22:11:28+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwareworkspaceoneaccesscertproxylpe.rb 2022-08-05 20:20:50+00:00| seen| https://t.me/cibsecurity/47627 2022-08-13 21:00:43+00:00|...

geruestbau-toelke.de Cross Site Scripting vulnerability OBB-2803090

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-36948

creationtimestamp| type| source ---|---|--- 2021-08-11 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=628 2021-08-11 18:46:50+00:00| seen| https://t.me/truesecator/1993 2021-08-12 15:03:50+00:00| seen| https://t.me/sysodmins/12669 2021-08-12 22:39:58+00:00| seen|...

CVE-2021-28664

creationtimestamp| type| source ---|---|--- 2021-06-08 17:52:38+00:00| seen| https://t.me/androidMalware/1217 2021-11-08 08:58:17+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2022-04-27 11:03:23+00:00| exploited|...

CVE-2018-18556

creationtimestamp| type| source ---|---|--- 2020-09-19 13:26:48+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/ssh/vyosrestrictedshellprivesc.rb 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:06+00:00|...

CVE-2020-10644

creationtimestamp| type| source ---|---|--- 2020-06-25 16:25:27+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/scada/inductiveignitionrce.rb 2024-10-31 02:05:38+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1355 2025-02-0...

CVE-2019-3799

creationtimestamp| type| source ---|---|--- 2019-04-26 14:45:34+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/springcloudtraversal.rb 2023-11-02 13:56:07+00:00| published-proof-of-concept| https://t.me/CNArsenal/1418 2023-11-02...

CVE-2018-8596

creationtimestamp| type| source ---|---|--- 2019-02-01 12:53:41+00:00| seen| MISP/5c543c87-503c-4622-a292-0aa6ac12042b 2020-10-09 15:53:03+00:00| seen| MISP/0b0f374b-39b1-4229-891b-2defd31fe736 2025-01-28 21:02:00+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lgte2h7ozn2x...

CVE-2016-5425

creationtimestamp| type| source ---|---|--- 2016-10-10 10:52:23+00:00| published-proof-of-concept| https://t.me/canyoupwnme/160 2016-10-11 16:36:42+00:00| published-proof-of-concept| https://t.me/FullDisclosure/149 2023-03-14 10:44:22+00:00| seen|...

CVE-2013-0641

creationtimestamp| type| source ---|---|--- 2013-08-22 14:54:38+00:00| seen| MISP/521625ab-fa68-431c-bfab-6a83ac1d4fa4 2020-10-09 17:20:16+00:00| seen| MISP/d765ce80-c55a-4fd6-8a7e-242cca159458 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 01:37:16+00:00|...

CVE-2011-3167

creationtimestamp| type| source ---|---|--- 2012-01-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18388 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hpnnmovbuildpathtextfile.rb 2025-02-06...

CVE-2004-1373

creationtimestamp| type| source ---|---|--- 2010-04-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16751 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/shoutcastformat.rb 2025-02-06 03:13:38+00:00| seen|...

CVE-2006-2447

creationtimestamp| type| source ---|---|--- 2010-04-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16920 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/misc/spamassassinexec.rb 2025-02-06 03:13:38+00:00| seen|...