CVE-2026-16270

creationtimestamp| type| source ---|---|--- 2026-07-22 14:01:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mraiehdrvc2i 2026-07-22 16:15:03+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-16270 2026-07-23 06:52:01+00:00| seen|...

CVE-2026-16270

Open Mercato does not validate regex rules. An attacker with privileges to create the regex rule can add an unsafe regex to a field. When someone provide the proper string it can result in a DoS attack. This issue was fixed in version 0.6.4...

CVE-2020-16270

OLIMPOKS under 3.3.39 allows Auth/Admin ErrorMessage XSS. Remote Attacker can use discovered vulnerability to inject malicious JavaScript payload to victim’s browsers in context of vulnerable applications. Executed code can be used to steal administrator’s cookies, influence HTML content of...

CVE-2017-16270

Insteon Hub (firmware 1012) exposes multiple stack-based buffer overflow vulnerabilities in the PubNub message handler for the cc channel. The root cause is unconstrained use of strcpy into fixed-size buffers (e.g., 32-byte buf for s_sonos_cmd, 20–100 byte buffers for various cmd fields), trigger...

CVE-2017-16270

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16270

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2020-16270

CVE-2020-16270 affects OLIMPOKS v3.3.39 and involves an Auth/Admin ErrorMessage XSS that enables a remote attacker to inject JavaScript in vulnerable applications. The vulnerability stems from improper handling/validation of the ErrorMessage parameter, allowing script execution in the victim’s br...

Exploit for Cross-site Scripting in Olimpoks Olimpok

CVE-2020-16270 Suggested description: OLIMPOKS under 3...

CVE-2018-16270

Samsung Galaxy Gear series before build RE2 includes the hcidump utility with no privilege or permission restriction. This allows an unprivileged process to dump Bluetooth HCI packets to an arbitrary file path...

CVE-2018-16270

The CVE concerns Samsung Galaxy Gear series prior to build RE2, where the hcidump utility lacks privilege/permission restrictions. The vulnerability allows an unprivileged process to dump Bluetooth HCI packets to an arbitrary file path, indicating exposure of sensitive Bluetooth data. The provide...

Fedora Update for mingw-flac FEDORA-2014-16270

Check the version of mingw-flac SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868588";...