23691 matches found
CVE-2026-35411 Directus is an Open Redirect in Admin 2FA Setup Page
Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.16.1, Directus is vulnerable to an open redirect via the redirect query parameter on the /admin/tfa-setup page. When an administrator who has not yet configured Two-Factor Authentication 2FA visits a...
CVE-2026-5643
creationtimestamp| type| source ---|---|--- 2026-04-06 14:21:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mithlohrfk2i...
CVE-2026-5573
creationtimestamp| type| source ---|---|--- 2026-04-05 16:38:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mir6qihh6j2g 2026-04-05 17:15:47+00:00| published-proof-of-concept| Telegram/gzCKNObz4im4uV-yc9tEdz-C82sp4ablGsaOO-Gqtulpb0...
CVE-2026-34229
creationtimestamp| type| source ---|---|--- 2026-04-04 00:09:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimwzpv5eq2i...
CVE-2025-43500
creationtimestamp| type| source ---|---|--- 2026-04-02 22:21:16+00:00| seen| Telegram/jan3qBrnQdo-CVsb-PSQrSq6j61dnEejj55vBVO2ANZr03c 2026-09-09 05:00:12+00:00| seen| https://t.me/IntelEncyclopedia/2262 2026-09-10 00:00:39+00:00| published-proof-of-concept| https://t.me/IntelEncyclopedia/2262...
CVE-2025-24170
creationtimestamp| type| source ---|---|--- 2026-04-02 22:13:57+00:00| seen| Telegram/plWZfBKuLfZsy-ETkIClFjgDzJwrXtOcx6BqjotDny4d66c...
CVE-2026-34745
creationtimestamp| type| source ---|---|--- 2026-04-02 21:00:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mik3z6daqs2i 2026-04-02 22:22:50+00:00| seen| Telegram/8YijTp8Bkg1BgPYn1xfGtyu-IfZ2h3UIXQPTCviuLwYJAlo 2026-04-03 02:31:01+00:00| seen|...
CVE-2025-68754
creationtimestamp| type| source ---|---|--- 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260408...
BELL-CVE-2026-23410
Bulletin has no description...
CVE-2025-32151
creationtimestamp| type| source ---|---|--- 2026-04-01 21:29:45+00:00| seen| Telegram/L0cFcm6S1F1svW4k55Pq2JGBMr8SGws0gJeKBbgjH-EsWCM...
CVE-2026-5037
A vulnerability was determined in mxml up to 4.0.4. This issue affects the function indexsort of the file mxml-index.c of the component mxmlIndexNew. Executing a manipulation of the argument tempr can lead to stack-based buffer overflow. The attack is restricted to local execution. The exploit ha...
CVE-2026-4622
OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network...
CVE-2026-34453
creationtimestamp| type| source ---|---|--- 2026-03-28 11:39:55+00:00| published-proof-of-concept| https://github.com/siyuan-note/siyuan/security/advisories/GHSA-c77m-r996-jr3q 2026-03-31 23:20:56+00:00| seen| Telegram/8TNuFRjRJBw5r6zwiOXWdT-cqnzTtiBnsbsFB7NS1OTWS8 2026-04-01 03:07:09+00:00| seen...
CVE-2026-34411
creationtimestamp| type| source ---|---|--- 2026-03-27 19:19:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi2tl7ovon2t...
CVE-2021-27382
A vulnerability has been identified in Solid Edge SE2020 All versions SE2020MP13, Solid Edge SE2020 All versions SE2020MP14, Solid Edge SE2021 All Versions SE2021MP4. Affected applications lack proper validation of user-supplied data when parsing of PAR files. This could result in a stack based...
CVE-2021-27670
Appspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonprequest url parameter...
CVE-2021-27722
An issue was discovered in Nsasoft US LLC SpotAuditor 5.3.5. The program can be crashed by entering 300 bytes char data into the "Key" or "Name" field while registering...
CVE-2021-27821
The Web Interface for OpenWRT LuCI version 19.07 and lower has been discovered to have a cross-site scripting vulnerability which can lead to attackers carrying out arbitrary code execution...
CVE-2021-27931
LumisXP aka Lumis Experience Platform before 10.0.0 allows unauthenticated blind XXE via an API request to PageControllerXml.jsp. One can send a request crafted with an XXE payload and achieve outcomes such as reading local server files or denial of service...