CVE-2025-13293

A hard-coded or default root account credential in TBEA TLogger V2.1.0.0B0.0.0.0 allows an unauthenticated remote attacker to obtain root-level access to the device via the exposed SSH service. The root password can be recovered from the password hash stored in /etc/shadow and used to authenticat...

CVE-2021-34512

creationtimestamp| type| source ---|---|--- 2026-08-10 19:06:27+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3msqsald3t72x...

CVE-2026-72870

Dokploy's buildRemoteDocker vulnerability affects Dokploy before 0.29.13. The buildRemoteDocker() function interpolates the application-controlled dockerImage value directly into a docker pull command, enabling an authenticated user with project access to craft a dockerImage via application.updat...

CVE-2026-12339 Authenticated Arbitrary File Write Vulnerability in multiple devices

A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive containing directory traversal sequences. An authenticated administrator may overwrite arbitrary files on the system.Successful exploitation may allow arbitrary file to be overwritten...

CVE-2026-72733

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, the backup.restoreBackupWithLogs tRPC subscription builds database restore shell pipelines from the user-controlled databaseName and backupFile fields without safely separating them from shell syntax...

CVE-2026-72898

creationtimestamp| type| source ---|---|--- 2026-08-10 18:04:27+00:00| seen| https://infosec.exchange/users/wdormann/statuses/117072531713464991 2026-08-10 18:04:38+00:00| seen| https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3msqorw2bpc22 2026-08-10 18:56:56+00:00| seen|...

CVE-2026-72740 Dokploy: OS Command Injection via SSH-form `customGitUrl` domain in `ssh-keyscan`

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, packages/server/src/utils/providers/git.ts parses the user-controlled customGitUrl with sanitizeRepoPathSSH and interpolates its domain into the ssh-keyscan command from addHostToKnownHostsCommand without shell quoting...

CVE-2026-72737

Dokploy is a free, self-hostable Platform as a Service PaaS. In 0.29.8 and earlier, backup.create, backup.update, and backup.restoreBackupWithLogs in apps/dokploy/server/api/routers/backup.ts accept a client-controlled destinationId and use the referenced destination without verifying that...

CVE-2026-72733

Dokploy (PaaS) shows a critical OS command injection in the backup/restore flow. Prior to 0.29.13, the tRPC backup.restoreBackupWithLogs path builds shell commands by interpolating user-controlled databaseName and backupFile into restore commands and rclone paths, allowing an authenticated user w...

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

No d...

Exploit for Protection Mechanism Failure in Microsoft

cve-id Donate Support the maintenance of this project wit...

cve_vulnerability_bot

No d...

MINI-3M25-6CFW-49G7

Bulletin has no description...

DEBIAN-CVE-2026-68419

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Prevent reregmr for non-mem regions When a QP/CQ/SRQ is created, a two step process is used where the buffer is allocated in userspace and explicitly registered with the normal regmr mechanism prior to creating the...

MINI-G778-V89G-P5CQ

Bulletin has no description...

UBUNTU-CVE-2026-68398

In the Linux kernel, the following vulnerability has been resolved: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF pppol2tprecv runs in the L2TP UDP-encap softirq RX path: l2tpudpencaprecv - l2tprecvcommon - pppol2tprecv - pppinput&po-chan It runs under rcureadlock holding...

CVE-2026-15059

Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation...

UBUNTU-CVE-2026-68083

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix path resolution in ksmbdvfskernpathcreate The SMB2 open lookup is rooted at the share with LOOKUPBENEATH, but the create/mkdir/hardlink sink is not: ksmbdvfskernpathcreate builds an absolute path with converttounixname...

CVE-2026-68425

In the Linux kernel, the following vulnerability has been resolved: IB/mad: Drop unmatched RMPP responses before reassembly Kernel-handled RMPP receive processing starts reassembly for active DATA responses before the response is matched to an outstanding send. The normal match happens later, aft...

CVE-2026-68418

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Prevent user-triggered null deref on QP create Previously, the user QP creation path would only attempt to populate iwqp-iwpbl if the user-provided req.userwqebufs field was non-zero. The problem is that iwqp-iwpbl is...