4894 matches found
CVE-2026-25223
creationtimestamp| type| source ---|---|--- 2026-02-03 22:19:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdyfetewlo2h...
CVE-2026-24729
An unrestricted upload of file with dangerous type vulnerability in the file upload function of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to execute arbitrary system commands via a malicious class file...
CVE-2026-24728
A missing authentication for critical function vulnerability in the /servlet/baServer3 endpoint of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to access exposed administrative functionality without prior authentication...
CVE-2026-24729
An unrestricted upload of file with dangerous type vulnerability in the file upload function of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to execute arbitrary system commands via a malicious class file...
EUVD-2026-5017
An unrestricted upload of file with dangerous type vulnerability in the file upload function of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to execute arbitrary system commands via a malicious class file...
CVE-2026-24729 Interinfo DreamMaker - Unrestricted Upload of File with Dangerous Type
An unrestricted upload of file with dangerous type vulnerability in the file upload function of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to execute arbitrary system commands via a malicious class file...
CVE-2026-24729
An unrestricted upload of file with dangerous type vulnerability exists in Interinfo DreamMaker’s file upload function, affecting versions before 2025/10/22. The root cause is an insufficient validation of uploaded files, enabling remote attackers to execute arbitrary system commands via a malici...
EUVD-2026-5016
A missing authentication for critical function vulnerability in the /servlet/baServer3 endpoint of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to access exposed administrative functionality without prior authentication...
CVE-2026-24728
The vulnerability CVE-2026-24728 affects Interinfo DreamMaker, specifically the /servlet/baServer3 endpoint. A missing authentication for a critical function allows remote attackers to access exposed administrative functionality without prior authentication in DreamMaker versions before 2025/10/2...
PT-2026-5377
A missing authentication for critical function vulnerability in the /servlet/baServer3 endpoint of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to access exposed administrative functionality without prior authentication...
CVE-2026-0750
creationtimestamp| type| source ---|---|--- 2026-01-28 22:00:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdjbijauap2j...
SUSE-SU-2026:0301-1 Security update for nodejs22
This update for nodejs22 fixes the following issues: Security fixes: - CVE-2026-22036: Fixed unbounded decompression chain in HTTP response leading to resource exhaustion bsc1256848 - CVE-2026-21637: Fixed synchronous exceptions thrown during callbacks that bypass TLS error handling and causing...
CVE-2026-1427
creationtimestamp| type| source ---|---|--- 2026-01-26 07:33:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10655-59160-2.html 2026-01-26 09:00:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdcuydgw3f2m 2026-01-26 09:58:34+00:00| seen|...
GHSA-2P49-45HJ-7MC9
creationtimestamp| type| source ---|---|--- 2026-01-24 21:22:59+00:00| seen| https://gist.github.com/alon710/4b217fe2cf8ffb61c81cdbc3ae7afb81 2026-01-24 22:19:21+00:00| seen| https://gist.github.com/alon710/a4941f2432a88ce8da6f5f32e199afb8 2026-01-24 22:19:24+00:00| seen|...
CVE-2026-24307
creationtimestamp| type| source ---|---|--- 2026-01-22 23:28:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md2dmgtemf2x 2026-01-23 00:29:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md2gzhkj6a2i 2026-02-13 04:55:22+00:00| seen|...
CVE-2026-23988
creationtimestamp| type| source ---|---|--- 2026-01-22 23:19:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md2d52s3d72m 2026-01-26 05:56:15+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mdckp57poa2w 2026-01-26 14:35:32+00:00| seen|...
CVE-2026-20888
creationtimestamp| type| source ---|---|--- 2026-01-22 23:10:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md2cn4pklo2n 2026-01-24 21:22:10+00:00| seen| https://gist.github.com/alon710/c04d0150fe6489cd6aa0244c5949dba1 2026-05-13 05:04:19+00:00| seen|...
CVE-2023-7335
creationtimestamp| type| source ---|---|--- 2026-01-22 20:37:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md223muvuu2m 2026-01-23 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2026-01-23 2026-01-23 21:02:58+00:00| seen|...