agentprime: namelessEvery new CVE for nameless.https://agentprime.io/CVE-2026-40571: NamelessMC: Reactions on private or blocking profile posts can be modified without proper authorizationhttps://agentprime.io/advisories/CVE-2026-40571/https://agentprime.io/advisories/CVE-2026-40571/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Jun 2026 16:44:14 GMTCVECVE-2026-35447: NamelessMC: Private or blocking profile pages can be bypassed with direct POST requests, and reply handling allows cross-profile writeshttps://agentprime.io/advisories/CVE-2026-35447/https://agentprime.io/advisories/CVE-2026-35447/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Jun 2026 16:41:14 GMTCVECVE-2026-40314: NamelessMC: Reactions on private or blocking profile posts can be read and modified without proper authorizationhttps://agentprime.io/advisories/CVE-2026-40314/https://agentprime.io/advisories/CVE-2026-40314/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Jun 2026 16:08:21 GMTCVECVE-2026-35443: NamelessMC: Forum reactions bypass the "view own topics only" restrictionhttps://agentprime.io/advisories/CVE-2026-35443/https://agentprime.io/advisories/CVE-2026-35443/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Jun 2026 15:50:06 GMTCVECVE-2026-34460: NamelessMC: OAuth callback `state` is not validated, allowing login CSRF / session swappinghttps://agentprime.io/advisories/CVE-2026-34460/https://agentprime.io/advisories/CVE-2026-34460/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Jun 2026 15:29:14 GMTCVECVE-2026-33398: Authenticated users can read hidden forum posts through `/forum/get_quotes`https://agentprime.io/advisories/CVE-2026-33398/https://agentprime.io/advisories/CVE-2026-33398/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Jun 2026 15:19:29 GMTCVECVE-2026-32250: NamelessMC has Reflected Cross-Site Scripting (XSS) in id parameter of /index.php?route=/queries/user/https://agentprime.io/advisories/CVE-2026-32250/https://agentprime.io/advisories/CVE-2026-32250/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Jun 2026 13:37:13 GMTCVECVE-2025-54117: NamelessMC allows Stored Cross-Site Scripting (XSS) in dashboard text editorhttps://agentprime.io/advisories/CVE-2025-54117/https://agentprime.io/advisories/CVE-2025-54117/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 18 Aug 2025 16:02:48 GMTCVEcriticalCVE-2025-54421: NamelessMC allows Stored Cross Site Scripting (XSS) in SEO componenthttps://agentprime.io/advisories/CVE-2025-54421/https://agentprime.io/advisories/CVE-2025-54421/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 18 Aug 2025 16:01:30 GMTCVECVE-2025-54118: NamelessMC allows sensitive information disclosure in member list componenthttps://agentprime.io/advisories/CVE-2025-54118/https://agentprime.io/advisories/CVE-2025-54118/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 18 Aug 2025 15:59:15 GMTCVECVE-2025-32389: NamelessMC Vulnerable to SQL Injections in /user/messaging and /panel/users/reports Pageshttps://agentprime.io/advisories/CVE-2025-32389/https://agentprime.io/advisories/CVE-2025-32389/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Apr 2025 15:56:39 GMTCVECVE-2025-31120: NamelessMC Vulnerable to Cookie-Based View Count Manipulationhttps://agentprime.io/advisories/CVE-2025-31120/https://agentprime.io/advisories/CVE-2025-31120/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Apr 2025 15:52:57 GMTCVECVE-2025-31118: NamelessMC Has Forum Reply Submission Time Limit Bypasshttps://agentprime.io/advisories/CVE-2025-31118/https://agentprime.io/advisories/CVE-2025-31118/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Apr 2025 15:52:36 GMTCVECVE-2025-30357: NamelessMC Forum Topic Deletion Triggered by Unrelated User Deletionhttps://agentprime.io/advisories/CVE-2025-30357/https://agentprime.io/advisories/CVE-2025-30357/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Apr 2025 15:51:21 GMTCVECVE-2025-30158: NamelessMC Forum iframe width/height abuse causing UI-based Denial of Servicehttps://agentprime.io/advisories/CVE-2025-30158/https://agentprime.io/advisories/CVE-2025-30158/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Apr 2025 15:50:49 GMTCVECVE-2025-29784: NamelessMC Has Lack of Length Validation for s Parameter in GET Requestshttps://agentprime.io/advisories/CVE-2025-29784/https://agentprime.io/advisories/CVE-2025-29784/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Apr 2025 15:50:17 GMTCVECVE-2025-22142: Cross-site Scripting in NamelessMChttps://agentprime.io/advisories/CVE-2025-22142/https://agentprime.io/advisories/CVE-2025-22142/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Jan 2025 19:56:59 GMTCVECVE-2025-22144: Account Takeover in NamelessMChttps://agentprime.io/advisories/CVE-2025-22144/https://agentprime.io/advisories/CVE-2025-22144/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Jan 2025 19:49:03 GMTCVEcritical