CVE-2026-2689

creationtimestamp| type| source ---|---|--- 2026-02-20 04:20:11+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfbayertpa2u...

CVE-2019-25352

creationtimestamp| type| source ---|---|--- 2026-02-20 01:40:11+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfay2b7pxj2e...

CVE-2026-23549

creationtimestamp| type| source ---|---|--- 2026-02-20 01:31:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfaxlkdbma2s...

CVE-2025-67304

In Ruckus Network Director RND 4.5.0.54, the OVA appliance contains hardcoded credentials for the ruckus PostgreSQL database user. In the default configuration, the PostgreSQL service is accessible over the network on TCP port 5432. An attacker can use the hardcoded credentials to authenticate...

CVE-2026-26316

creationtimestamp| type| source ---|---|--- 2026-02-20 00:05:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfasrkbige2v 2026-02-20 02:53:20+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mfb453gvkp27 2026-02-24 21:40:09+00:00| seen|...

CVE-2026-26959

creationtimestamp| type| source ---|---|--- 2026-02-20 00:00:45+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mfasihmrx622 2026-02-20 00:00:56+00:00| seen| https://infosec.exchange/users/offseq/statuses/116100015280543549 2026-02-20 00:19:46+00:00| seen|...

PT-2026-21318

Name of the Vulnerable Software and Affected Versions OrientDB version 3.0.17 Description OrientDB 3.0.17 has a stored cross-site scripting issue. Authenticated attackers can inject malicious scripts by creating users with script payloads in the name parameter. Attackers can send POST requests to...

CVE-2019-25447: Cross-Site Request Forgery (CSRF)

OrientDB 3.0.17 GA Community Edition contains cross-site request forgery vulnerabilities that allow attackers to perform unauthorized actions by crafting malicious requests to endpoints like /database/, /command/, and /document/. Attackers can create or delete databases, modify schema classes,...

CVE-2026-27112: Incorrect Authorization

Kargo manages and automates the promotion of software artifacts. From 1.7.0 to before v1.7.8, v1.8.11, and v1.9.3, the batch resource creation endpoints of both Kargo's legacy gRPC API and newer REST API accept multi-document YAML payloads. Specially crafted payloads can manifest a bug present in...

The vulnerability of the `smf_gn_handle_create_pdp_context_request` function in the `/src/smf/gn-handler.c` file, which is used for creating and managing NR/LTE Open5GS mobile networks. This vulnerability allows a attacker to cause a service failure.

The vulnerability of the smfgnhandlecreatepdpcontextrequest function in the /src/smf/gn-handler.c file, which is used for creating and managing NR/LTE Open5GS mobile networks, is related to an uncontrolled, exploitable flaw. Exploiting this vulnerability could allow a malicious actor to cause...

GHSA-VRHM-GVG7-FPCF

creationtimestamp| type| source ---|---|--- 2026-02-19 22:10:39+00:00| seen| https://gist.github.com/alon710/bdb71500cdcbca966a4ff1f078991fa5 2026-02-19 22:40:03+00:00| seen| https://bsky.app/profile/flarestart.bsky.social/post/3mfany5xe432p...

CVE-2025-70063

creationtimestamp| type| source ---|---|--- 2026-02-19 21:03:00+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mfaikm2qpx2k...

GHSA-88QP-P4QG-RQM6

creationtimestamp| type| source ---|---|--- 2026-02-19 20:40:40+00:00| seen| https://gist.github.com/alon710/7f0b026aa3cc9fd728c23b8682ac26d2...

Formwork Improperly Managed Privileges in User creation

Summary The application fails to properly enforce role-based authorization during account creation. Although the system validates that the specified role exists, it does not verify whether the current user has sufficient privileges to assign highly privileged roles such as admin. As a result, an...

GHSA-34P4-7W83-35G2 Formwork Improperly Managed Privileges in User creation

Summary The application fails to properly enforce role-based authorization during account creation. Although the system validates that the specified role exists, it does not verify whether the current user has sufficient privileges to assign highly privileged roles such as admin. As a result, an...

GHSA-FH3F-Q9QW-93J9

creationtimestamp| type| source ---|---|--- 2026-02-19 20:10:40+00:00| seen| https://gist.github.com/alon710/85b1f7a719954f294f29981a82d63310...

CVE-2026-23608 GFI MailEssentials AI < 22.4 Email Management Mail Monitoring Rule Stored XSS

GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Mail Monitoring rule creation endpoint. An authenticated user can supply HTML/JavaScript in the JSON "name" field to /MailEssentials/pages/MailSecurity/MailMonitoring.aspx/Save, which is stored...

CVE-2026-23606 GFI MailEssentials AI < 22.4 Advanced Content Filtering Rule Stored XSS

GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Advanced Content Filtering rule creation workflow. An authenticated user can supply HTML/JavaScript in the ctl00$ContentPlaceHolder1$pv1$txtRuleName parameter to...

CVE-2026-23606 GFI MailEssentials AI < 22.4 Advanced Content Filtering Rule Stored XSS

GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Advanced Content Filtering rule creation workflow. An authenticated user can supply HTML/JavaScript in the ctl00$ContentPlaceHolder1$pv1$txtRuleName parameter to...

CVE-2026-23605 GFI MailEssentials AI < 22.4 Attachment Filtering Rule Stored XSS

GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Attachment Filtering rule creation workflow. An authenticated user can supply HTML/JavaScript in the ctl00$ContentPlaceHolder1$pv1$TXBRuleName parameter to...