30 matches found
cve-disclosures
CVE Disclosures Coordinated vulnerability disclosures and CVE references published by Anindya Sankar Roy GitHub: @fr3akhacks. Each entry below links to a public advisory containing the affected product, affected/fixed versions, CVE ID, prose description, vulnerability type, root cause, and impact...
mbadanoiu
Welcome to the Weekend Retreat of Matei "Mal" Badanoiu This GitHub is used to post my CVEs and Security Research during my free time/weekends. All materials present in this GitHub profile are meant for security research and etichal hacking. I do not condone malicious behavoiur such as hacking...
Log4J-Mitigation-CVE-2021-44228--CVE-2021-45046--CVE-2021-45105--CVE-2021-44832
Mitigación de Log4J-CVE-2021-44228,CVE-2021-45046,CVE-2021-45105,CVE-2021-44832 Por favor, mantén un ojo en esta ya que el equipo de Apache Log4j está divulgando muchos más CVEs y solucionando problemas de seguridad muy rápidamente...
D-LINK DNS-320L,DNS-320LW and DNS-327L - Information Disclosure
A vulnerability has been found in D-Link DNS-320L, DNS-320LW and DNS-327L up to 20240403 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/info.cgi of the component HTTP GET Request Handler. id: CVE-2024-3274 info: name: D-LINK...
security-advisories
security-advisories Public security advisories published by Me Chidubem ChukwuTerminal Venom, including CVE disclosures and vulnerability reports for open-source and third-party softwares...
CVE-2026-69592
creationtimestamp| type| source ---|---|--- 2026-09-08 22:09:00+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:07:49+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 10:18:20+00:00|...
CVE-2026-68845
creationtimestamp| type| source ---|---|--- 2026-09-08 22:08:08+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:06:47+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 08:53:23+00:00|...
CVE-2026-78416
creationtimestamp| type| source ---|---|--- 2026-08-24 17:04:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dwnqgjb7vot5l 2026-08-25 05:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtv3mklvvi24 2026-09-07 16:27:03+00:00| seen|...
edk2 security, bug fix, and enhancement update
An update is available for edk2. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list EDK Embedded Development Kit is a project to enable UEFI support for Virtual...
CVE-2026-9378
Edimax BR-6675nD (firmware 1.12) is affected by CVE-2026-9378 due to a vulnerability in the POST Request Handler, specifically in formHwSet (/goform/formHwSet). The issue allows manipulation of arguments regDomain, ABandregDomain, nic0Addr, nic1Addr, wlanAddr, inicAddr to trigger command injectio...
CVE-2026-3661 Wavlink WL-NU516U1 adm.cgi ota_new_upgrade command injection
A flaw has been found in Wavlink WL-NU516U1 240425. This affects the function otanewupgrade of the file /cgi-bin/adm.cgi. This manipulation of the argument model causes command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. The vendor wa...
CVE-2025-30086
CNCF Harbor 2.13.x before 2.13.1 and 2.12.x before 2.12.4 allows information disclosure by administrators who can exploit an ORM Leak present in the /api/v2.0/users endpoint to leak users' password hash and salt values. The q URL parameter allows a user to filter users by any column, and filter...
CVE-2025-20101
Out-of-bounds read for some IntelR Graphics Drivers may allow an authenticated user to potentially enable information disclosure or denial of service via local access...
CVE-2025-1993
CVE-2025-1993 affects IBM App Connect Enterprise Certified Container DesignerAuthoring instances where flows are stored in a database protected by weaker than expected cryptographic algorithms, potentially exposed to a local user. IBM bulletin (CVE-2025-1993) details affected products/versions: A...
CVE-2024-56467
Affected product/versions: IBM EntireX 11.1. Vulnerability: Local users may obtain sensitive information when a detailed technical error message is returned. The issue corresponds to CWE-209 (Generation of Error Message Containing Sensitive Information). Impact (as per sources): Information discl...
CVE-2025-24899 Disclosure of Sensitive User Information via API in reNgine
reNgine is an automated reconnaissance framework for web applications. A vulnerability was discovered in reNgine, where an insider attacker with any role such as Auditor, Penetration Tester, or Sys Admin can extract sensitive information from other reNgine users. After running a scan and obtainin...
CVE-2024-45653 IBM Sterling Connect:Direct Web Services information disclosure
IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 could disclose sensitive IP address information to authenticated users in responses that could be used in further attacks against the system...
SUSE-SU-2025:0105-1 Security update for the Linux Kernel (Live Patch 46 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-15030059167 fixes several issues. The following security issues were fixed: - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk-trans bsc1233712. - CVE-2022-48956: ipv6: avoid use-after-free in ip6fragment bsc1232637. -...
CVE-2025-21294
creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:20:31+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpuivp6wu2r 2025-01-14 18:48:54+00:00| seen|...