CVE-2026-26351

creationtimestamp| type| source ---|---|--- 2026-02-25 01:16:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfnj3b2csr2e...

CVE-2025-26351

A CWE-35 "Path Traversal" in the template download mechanism in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to read sensitive files via crafted HTTP requests...

CVE-2025-26351

creationtimestamp| type| source ---|---|--- 2025-02-12 14:35:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113991414694623575...

CVE-2025-26351

CVE-2025-26351 describes a CWE-35 path traversal in the template download mechanism of Q-Free MaxTime (versions ≤ 2.11.0). An authenticated remote attacker can read sensitive files via crafted HTTP requests. Root cause: improper validation in the template download flow enabling path traversal. Im...

CVE-2025-26351

A CWE-35 "Path Traversal" in the template download mechanism in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to read sensitive files via crafted HTTP requests...

CVE-2024-26351

creationtimestamp| type| source ---|---|--- 2024-02-22 15:26:47+00:00| seen| https://t.me/ctinow/190811 2024-02-22 15:27:01+00:00| seen| https://t.me/ctinow/190822...

CVE-2024-26351

Flusity-CMS v2.33 contains a Cross-Site Request Forgery (CSRF) in the /core/tools/update_place.php component. The issue stems from CSRF in the update_place workflow, enabling state-changing requests under the attacker’s context when a user is tricked to interact with the CMS. Per CVSS 3.1 metrics...

CVE-2023-26351

creationtimestamp| type| source ---|---|--- 2023-03-29 00:46:01+00:00| seen| https://t.me/cibsecurity/60956...

CVE-2023-26351

CVE-2023-26351 refers to Adobe Dimension USD file parsing: an out-of-bounds read in Dimension 3.4.7 and earlier could disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). A fixed version is 3.4.8 (per APSB23-20; advisory notes a security update ...

Adobe Dimension < 3.4.8 Multiple Vulnerabilities (APSB23-20) (macOS)

The version of Adobe Dimension installed on the remote macOS host is prior to 3.4.8. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-20 advisory. - Adobe Dimension versions 3.4.7 and earlier is affected by a Stack-based Buffer Overflow vulnerability that could...

CVE-2021-26351

creationtimestamp| type| source ---|---|--- 2022-05-12 22:36:35+00:00| seen| https://t.me/cibsecurity/42546...

CVE-2021-26351

CVE-2021-26351 corresponds to an insufficient DRAM address validation vulnerability in the AMD System Management Unit (SMU), which may allow a DMA read/write to an invalid DRAM address and cause a denial of service. Connected AMD advisories (AMD-SB-1027) map this issue to AMD platforms across des...

Breaking RSA through Insufficiently Random Primes

Basically, the SafeZone library doesnt sufficiently randomize the two prime numbers it used to generate RSA keys. Theyre too close to each other, which makes them vulnerable to recovery. There arent many weak keys out there, but there are some: So far, Böck has identified only a handful of keys i...

CVE-2022-26351

...

CVE-2022-26351

CVE-2022-26351 is a rejected/duplicate candidate and does not represent an active vulnerability entry; refer to CVE-2022-26320.

CVE-2020-26351

CVE-2020-26351 is rejected; this candidate number is not used and does not represent an active vulnerability entry.