CVE-2026-12080

creationtimestamp| type| source ---|---|--- 2026-07-20 14:06:03+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mr3ho2q2t42o 2026-07-20 14:06:03+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116952685778778549 2026-07-20 16:05:56+00:00| seen|...

UBUNTU-CVE-2026-12080

A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. This can occur either through a deterministic directory-symlink bypass or a Time-of-Check to Time-of-Use TOCTOU...

CVE-2026-12080

A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. This can occur either through a deterministic directory-symlink bypass or a Time-of-Check to Time-of-Use TOCTOU...

SUSE CVE-2026-12080

A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. This can occur either through a deterministic directory-symlink bypass or a Time-of-Check to Time-of-Use TOCTOU...

CVE-2026-12080

A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. This can occur either through a deterministic directory-symlink bypass or a Time-of-Check to Time-of-Use TOCTOU...

CVE-2025-12080

On Wear OS devices, when Google Messages is configured as the default SMS/MMS/RCS application, the handling of ACTIONSENDTO intents utilizing the sms:, smsto:, mms:, and mmsto: Uniform Resource Identifier URI schemes is incorrectly implemented. Due to this misconfiguration, an attacker capable of...

CVE-2025-12080

creationtimestamp| type| source ---|---|--- 2025-10-27 17:20:11+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/10306 2025-10-29 01:43:50+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m4cd3ti62322...

CVE-2020-12080

creationtimestamp| type| source ---|---|--- 2021-09-17 22:24:12+00:00| seen| https://t.me/cibsecurity/29064...

CVE-2020-12080

CVE-2020-12080 affects FlexNet Publisher’s lmadmin.exe 11.16.6. A DoS arises from a crafted message protocol that can crash lmadmin, with network-based access and no authentication required (CVSSv3.1: 7.5 Critical; CVSSv2: 5.0). The available documents confirm the vulnerability and its impact but...

CVE-2018-12080

The CVE describes a vulnerability in the Internet Node Token (INT) ERC20 contract where the mintToken function has no period constraint. This allows the owner to arbitrarily increase total supply, enabling potential profit manipulation. Documents confirm the affected component is the mintToken fu...

CVE-2017-12080

An information exposure vulnerability in default HTTP configuration file in Synology Photo Station before 6.8.1-3458 and before 6.3-2970 allows remote attackers to obtain sensitive system information via .htaccess file...

CVE-2017-12080

CVE-2017-12080 affects Synology Photo Station prior to 6.8.1-3458 and prior to 6.3-2970. An information-disclosure vulnerability exists in the default HTTP configuration file that can let remote attackers obtain sensitive system information via an .htaccess file. The root cause is exposure via th...