18281 matches found
CVE-2025-12773
creationtimestamp| type| source ---|---|--- 2026-02-03 03:17:21+00:00| seen| Telegram/CgBosmGjiUsFubMTPyQoIc-fq6HoQhesjtq1xv5gYNaUJw...
Linux arch/arm64/mm/pageattr.c Heap Buffer Overflow DoS
The vulnerability of the changememorycommon function in the arch/arm64/mm/pageattr.c module of the Linux operating system is related to the lack of checking of the returned value. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibilit...
60CycleCMS SQL Injection Vulnerability
60CycleCMS is an open-source content management system developed by 60CycleCMS. Version 2.5.2 of 60CycleCMS has a SQL injection vulnerability. This vulnerability stems from SQL injections in the news.php and common/lib.php files, which could allow attackers to manipulate database queries with...
PT-2026-5855
Name of the Vulnerable Software and Affected Versions 60CycleCMS version 2.5.2 Description The software contains an SQL injection issue in the 'news.php' and 'common/lib.php' files. Attackers can manipulate database queries through unvalidated user input. Specifically, the 'title' parameter is...
CVE-2020-37110: Improper Neutralization of Special Elements used in an SQL Command
60CycleCMS 2.5.2 contains an SQL injection vulnerability in news.php and common/lib.php that allows attackers to manipulate database queries through unvalidated user input. Attackers can exploit vulnerable query parameters like 'title' to inject malicious SQL code and potentially extract or modif...
CGA-3MF8-Q3QQ-6GHW
Bulletin has no description...
DEBIAN-CVE-2025-71183
In the Linux kernel, the following vulnerability has been resolved: btrfs: always detect conflicting inodes when logging inode refs After rename exchanging either with the rename exchange operation or regular renames in multiple non-atomic steps two inodes and at least one of them is a directory,...
SUSE SLES15: kubernetes1.35-client / kubernetes1.35-client-bash-completion / etc (SUSE-SU-2026:0325-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0325-1 advisory. This update for kubernetes rebuilds it against the current GO security release. Tenable has extracted the preceding descriptio...
Rockwell Automation CompactLogix 5370 Denial of Service Vulnerability
Rockwell Automation CompactLogix 5370 is a programmable logic controller from Rockwell Automation. The Rockwell Automation CompactLogix 5370 suffers from a denial of service vulnerability that originates from sending a malformed CIP forward open message, which can be exploited by an attacker to...
TOTOLINK A7000R Command Injection Vulnerability
TOTOLINK A7000R is a wireless router produced by TOTOLINK, a Chinese company. The TOTOLINK A7000R version 4.1cu.4154 contains a command injection vulnerability. This vulnerability arises from incorrect handling of the parameter FileName in the file /cgi-bin/cstecgi.cgi, which may lead to command...
PT-2026-5352
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A missing bounds check in the onTransact function of IDrmManagerService.cpp allows for a possible out-of-bounds write. This condition can be exploited to achieve...
Malicious Package
Overview @isfe-common/image-minimizer is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious Package
Overview admin-upload-common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview @smt-front/common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview @afound/common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
📄 Django Summernote 0.8.20.0 Unrestricted File Upload Scanner
This Metasploit Auxiliary Scanner module detects unrestricted file upload vulnerabilities in django-summernote. It targets misconfigurations where image validation depends on the Pillow library and allows non-image files to be uploaded when Pillow is missing. The module safely scans common upload...
CVE-2020-7063
creationtimestamp| type| source ---|---|--- 2026-01-27 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-027-02...
BELL-CVE-2026-23013
Bulletin has no description...
CVE-2026-24804: Loop with Unreachable Exit Condition
Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in coolsnowwolf lede package/lean/mt/drivers/mt7603e/src/mt7603wifi/common modules. This vulnerability is associated with program files bnlib.C. This issue affects lede: through r25.10.1...