124492 matches found
PT-2026-76963
Name of the Vulnerable Software and Affected Versions Zabbix server or proxy affected versions not specified Description An authenticated administrator can cause a denial of service by creating specifically crafted JavaScript scripts within preprocessing or script items, which results in the cras...
TencentOS Server 4: dracut (TSSA-2026:0845)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0845 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
Exploit for CVE-2026-19478
cve-id Donate Support the maintenance of this project wit...
CVE-2026-67961
An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke script execution...
Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic
Cybersecurity researchers have traced the continued evolution of the Cavern aka Cav3rn command-and-control C2 framework used by Iranian nation-state hackers in attacks targeting entities in Israel. Russian cybersecurity company Kaspersky said its ongoing monitoring of the threat activity cluster...
EUVD-2026-60193
In openshift-metal3/fakefish there is a repeated pattern in some of the scripts where shell variables are injected without quoting them either into command lines or into manifests. This mostly applies to the Image URL and BMC credentials which are not verified by FakeFish...
CVE-2026-75004
In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, improper rule name quoting could lead to managesievedisabledactions setting bypass via a crafted rule name in a Sieve script. This issue only affects Roundcube instances using the managesieve plugin...
CVE-2026-75004
In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, improper rule name quoting could lead to managesievedisabledactions setting bypass via a crafted rule name in a Sieve script. This issue only affects Roundcube instances using the managesieve plugin...
CVE-2026-75004
In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, improper rule name quoting could lead to managesievedisabledactions setting bypass via a crafted rule name in a Sieve script. This issue only affects Roundcube instances using the managesieve plugin...
CVE-2026-75004
In Roundcube Webmail, improper rule name quoting in the managesieve plugin allows a crafted Sieve rule name to bypass the managesieve_disabled_actions setting, letting users re-enable restricted Sieve actions (e.g., redirect, discard). Affects Roundcube <1.6.18 and 1.7.x
CVE-2026-75004
In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, improper rule name quoting could lead to managesievedisabledactions setting bypass via a crafted rule name in a Sieve script. This issue only affects Roundcube instances using the managesieve plugin...
Exploit for CVE-2026-59310
cve-id Donate Support the maintenance of this project wit...
CVE-2026-65914
A flaw was found in DOMPurify. This vulnerability, a type of Cross-Site Scripting XSS, occurs when HTML that has been sanitized is reinserted into specific parsing contexts using innerHTML with certain HTML elements like script or iframe. An attacker can craft malicious input that, during...
CVE-2026-73075
A flaw was found in Vim, an open-source text editor. This vulnerability involves an out-of-bounds memory access within the popup opacity handling feature. A local attacker could exploit this by using specially crafted Vim script, leading to an out-of-bounds read and a limited out-of-bounds write...
CVE-2026-19971
A flaw has been found in LB-Link WR1210M 1.0.3. This impacts the function main of the file /www/cgi-bin/backup.cgi of the component Backup Endpoint. This manipulation causes missing authentication. The attack is only possible within the local network. The vendor was contacted early about this...
CVE-2026-67961
The software O2OA v.10.0.2 contains a vulnerability that allows a local attacker to perform arbitrary code execution . The root cause is linked to a flaw in the sandbox mechanism used during the execution of the Invoke script . While the technical impact is high, the documents do not provide spec...
PT-2026-76873
Name of the Vulnerable Software and Affected Versions O2OA version 10.0.2 Description A local attacker can execute arbitrary code by exploiting the sandbox mechanism used during the execution of the Invoke script. Recommendations At the moment, there is no information about a newer version that...
CVE-2026-67961
An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke script execution...
