CVE-2026-10914

An use after free flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497574371...

One API 安全漏洞

One API is an LLM API management and distribution system developed by JustSong’s developers. Versions of One API prior to 0.6.11-preview.7 contained a security vulnerability. This vulnerability stemmed from a function issue in the Redemption Code Top-Up Endpoint component’s model/redemption.go...

PT-2026-47197

Name of the Vulnerable Software and Affected Versions zilliztech deep-searcher versions prior to 0.0.3 Description Improper access controls in the CollectionRouter.invoke function within the deepsearcher/agent/collection router.py file allow for remote exploitation. This issue is caused by the...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation due to insecure handling of TLS connections when communicating with vCenter. An attacker can intercept and obtain administrator credentials by performing a man-in-the-middle attack. Remediation A fix was...

Hermes Agent 安全漏洞

Hermes Agent is an AI agent tool developed by Nous Research, featuring a self-learning mechanism. Versions of Hermes Agent 0.12.0 and earlier contain security vulnerabilities. These vulnerabilities stem from the function resolvesessionbytitle in the resume Endpoint component’s file hermesstate.py...

CVE-2026-11438

creationtimestamp| type| source ---|---|--- 2026-06-06 20:55:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnnk2cufpv2l...

CVE-2026-11330

A weakness has been identified in thedotmack claude-mem up to 11.0.1. The affected element is the function computeObservationContentHash of the file src/services/sqlite/observations/store.ts of the component Observation Content Hash Handler. This manipulation causes use of weak hash. The attack c...

CVE-2026-11434

creationtimestamp| type| source ---|---|--- 2026-06-06 16:40:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnn3rts64p2a...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

CVE-2026-11413 JingDong JD Cloud Box AX6600 jdcweb_rpc set_macfilter stack-based overflow

A security vulnerability has been detected in JingDong JD Cloud Box AX6600 4.5.3.r4546. The impacted element is the function setmacfilter of the file /sbin/jdcwebrpc. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been...

CVE-2026-11408

A vulnerability was identified in vertex-app vertex up to 2026.02.12. This issue affects some unknown processing of the file app/model/LogMod.js of the component Log Viewer Endpoint. Such manipulation of the argument req.query leads to os command injection. The attack can be executed remotely. Th...

CVE-2026-48961

A flaw was found in the zipdetails command-line interface CLI tool, bundled with IO::Compress for Perl. When processing a specially crafted Info-ZIP Unix Extra Field with an 8-byte User ID UID or Group ID GID, the zipdetails tool attempts to call an undefined subroutine. This can lead to the tool...

CVE-2026-9280

creationtimestamp| type| source ---|---|--- 2026-06-06 05:34:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnlwlciikb2d 2026-06-12 05:03:40+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mo2xmhmahi26 2026-06-12 08:16:36+00:00| seen|...

CVE-2026-7792

creationtimestamp| type| source ---|---|--- 2026-06-06 05:19:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnlvqhaans2d 2026-06-12 12:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mo3psjcyvp2i...

SUSE CVE-2023-43633

On boot, the Pillar eve container checks for the existence and content of “/config/GlobalConfig/global.json”. If the file exists, it overrides the existing configuration on the device on boot. This allows an attacker to change the system's configuration, which also includes some debug functions...

CVE-2026-7565

creationtimestamp| type| source ---|---|--- 2026-06-06 04:39:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnltjbl3h62d 2026-06-12 16:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mo457oewae2b 2026-09-08 16:15:15+00:00| seen|...

EUVD-2026-34960

The Debug Log Manager – Conveniently Monitor and Inspect Errors plugin for WordPress is vulnerable to Improper Output Neutralization for Logs in all versions up to, and including, 2.5.0. This is due to the logjserrors AJAX handler being registered for unauthenticated users via...

SUSE CVE-2024-22119

The cause of vulnerability is improper validation of form input field “Name” on Graph page in Items section...

SUSE CVE-2026-50257

A use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence. A client that sets up multiple fence triggers can trigger a use-after-free function pointer call. An attacker would connect to the X server to set up a fence and await that fence, then a second X connection...

CVE-2026-8438

The All-In-One Security AIOS – Security and Firewall plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 5.4.7. This is due to insufficient input sanitization in the getrestroute function and missing output escaping in the columndefault method of the...