379 matches found
CVE-2026-45116
MyBB versions prior to 1.8.40 have a type-confusion flaw in UserDataHandler::verify_profile_fields() (inc/datahandlers/user.php): when a checkbox/multiselect profile field is submitted as a non-array value, the is_array() check is skipped, bypassing specialized validation. The unchecked value is ...
CVE-2026-45116
MyBB is free and open source forum software. Prior to 1.8.40, the user datahandler does not properly validate checkbox and multiselect profile field types, resulting in stored JavaScript code injection. UserDataHandler::verifyprofilefields only performs the specialized validation when...
PT-2026-77170
MyBB is free and open source forum software. Prior to 1.8.40, the user datahandler does not properly validate checkbox and multiselect profile field types, resulting in stored JavaScript code injection. UserDataHandler::verify profile fields only performs the specialized validation when is...
PT-2026-27035
Name of the Vulnerable Software and Affected Versions MacCMS versions prior to 2025.1000.4052 Description A weakness exists in MacCMS that allows authorization bypass. This issue affects the order info function within the application/index/controller/User.php file, specifically within the Member...
CVE-2025-15390 PHPGurukul Small CRM edit-user.php authorization
A security flaw has been discovered in PHPGurukul Small CRM 4.0. This impacts an unknown function of the file /admin/edit-user.php. The manipulation results in missing authorization. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for...
PT-2025-50960
Name of the Vulnerable Software and Affected Versions haxxorsid Stock-Management-System versions prior to fbbbf213e9c93b87183a3891f77e3cc7095f22b0 Description A security issue exists in haxxorsid Stock-Management-System. The manipulation of the employee id, id, or admin argument can lead to SQL...
PT-2025-41697
Name of the Vulnerable Software and Affected Versions SourceCodester Simple Inventory System version 1.0 Description A flaw exists in SourceCodester Simple Inventory System 1.0. The issue involves the manipulation of the uemail argument within an unknown function of the /user.php file, leading to...
EUVD-2001-1501
Malware in sbrugna...
EUVD-2010-3604
Malware in sbrugna...
EUVD-2006-4563
Malware in sbrugna...
EUVD-2008-6925
Malware in sbrugna...
EUVD-2007-2852
Malware in sbrugna...
EUVD-2018-6853
Malware in sbrugna...
EUVD-2020-13425
Malware in sbrugna...
EUVD-2012-6472
Malware in sbrugna...
EUVD-2011-5068
Malware in sbrugna...
EUVD-2017-9482
Malware in sbrugna...
EUVD-2001-1498
Malware in sbrugna...