AZL-77988 CVE-2026-27171 affecting package clucene 2.3.3.4-40

zlib before 1.3.2 allows CPU consumption via crc32combine64 and crc32combinegen64 because x2nmodp can do right shifts within a loop that has no termination condition...

CVE-2026-26250

creationtimestamp| type| source ---|---|--- 2026-02-13 11:30:40+00:00| seen| https://gist.github.com/alon710/f6e957f23a48ee9e192c1621c274b534...

GHSA-FF64-7W26-62RF

creationtimestamp| type| source ---|---|--- 2026-02-06 19:40:05+00:00| seen| https://gist.github.com/alon710/51a0c55d4dbb7e259a8444e158c05d3a 2026-03-03 13:58:01+00:00| seen| https://gist.github.com/hdknr/fd36299e0751373fd17f0ab90d49bf98...

PT-2026-21628

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-15 ImageMagick versions prior to 6.9.13-40 Description ImageMagick is software used for editing and manipulating digital images. A stack buffer overflow can occur when processing an attribute in the msl.c...

PT-2026-21605

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-15 ImageMagick versions prior to 6.9.13-40 Description ImageMagick is software used for editing and manipulating digital images. A logic error in YUV sampling factor validation allows an invalid sampling...

CVE-2026-0778

Enel X JuiceBox 40 Telnet Service Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Enel X JuiceBox 40 charging stations. Authentication is not required to exploit this...

CVE-2026-0778

Enel X JuiceBox 40 Telnet Service Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Enel X JuiceBox 40 charging stations. Authentication is not required to exploit this...

Enel X JuiceBox 40: Access control error vulnerability

The Enel X JuiceBox 40 is a household electric vehicle charging station developed by the American company Enel X. The Enel X JuiceBox 40 has a access control vulnerability, which stems from the lack of authentication in the Telnet service. This vulnerability may lead to remote code execution...

CVE-2026-0778: Missing Authentication for Critical Function

Enel X JuiceBox 40 Telnet Service Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Enel X JuiceBox 40 charging stations. Authentication is not required to exploit this...

CVE-2025-54852

creationtimestamp| type| source ---|---|--- 2026-01-20 15:30:40+00:00| seen| https://infosec.place/objects/23c3e016-78b1-467e-8e84-2cd0b8650286...

From the Shadows to the Headlines: A Decade of State-Sponsored Cyber Leaks

From the Shadows to the Headlines: A Decade of State-Sponsored Cyber Leaks By Ryan Slaney and Emma DeCarli · January 20, 2026 Executive summary The December 2, 2025, publication of a massive leak revealing the inner workings of the IRGC-linked Department 40 a.k.a. APT35, Charming Kitten, and Fres...

CVE-2026-22862

creationtimestamp| type| source ---|---|--- 2026-01-13 22:41:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcdmsy4nf22q 2026-01-24 21:25:30+00:00| seen| https://gist.github.com/alon710/075f469985ff370437f0ec2cae3d97ec 2026-01-24 22:40:57+00:00| seen|...

PT-2026-2006

Name of the Vulnerable Software and Affected Versions Enel X JuiceBox 40 affected versions not specified Description The Enel X JuiceBox 40 device contains a flaw due to a missing authentication mechanism in its Telnet service, potentially allowing for remote code execution. This issue was...

CVE-2026-21684

creationtimestamp| type| source ---|---|--- 2026-01-07 23:09:50+00:00| seen| Telegram/Hv7piurWFmTJB7c7iHri9T0M-meMIfk5qPkk7ikOJpSuKtA 2026-01-07 23:40:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbundduicw2e...

CVE-2025-59379

creationtimestamp| type| source ---|---|--- 2026-01-06 18:32:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbrlnbm27l2b...

CVE-2025-15456

creationtimestamp| type| source ---|---|--- 2026-01-05 06:00:38+00:00| published-proof-of-concept| Telegram/PEDMC-xQRSNOdcRnaiEMJorZFRbVJMF3imIAdH1nAh3lQ 2026-01-05 08:40:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbo24dt2l42e...

CVE-2025-69257

creationtimestamp| type| source ---|---|--- 2025-12-30 22:40:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbag76nyee2x 2026-01-24 22:44:19+00:00| seen| https://gist.github.com/alon710/5f1f59b372627b43576ca003c1b2b010...

CVE-2025-69205

creationtimestamp| type| source ---|---|--- 2025-12-29 23:27:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb5yfgfzcn2q...

CVE-2025-15091

creationtimestamp| type| source ---|---|--- 2025-12-26 00:40:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mau2lmyxpw2g 2025-12-26 02:35:04+00:00| seen| https://infosec.exchange/users/offseq/statuses/115783532715952577 2025-12-26 14:53:12+00:00| seen|...

Mozilla Thunderbird < 17.0.5

The version of Thunderbird installed on the remote Windows host is prior to 17.0.5. It is, therefore, affected by a vulnerability as referenced in the mfsa2013-40 advisory. - CERTDecodeCertPackage reads bytes outside the input bufferCVE-2013-0791 CVE-2013-0791 Note that Nessus has not tested for...