CVE-2026-24729

An unrestricted upload of file with dangerous type vulnerability in the file upload function of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to execute arbitrary system commands via a malicious class file...

GHSA-V5JW-RXC6-4CVV

creationtimestamp| type| source ---|---|--- 2026-01-30 21:22:13+00:00| seen| Telegram/IY6OfgVKLr1Nm-tUa300uQHvJ6lNcXOePNYcjK2gbqcsYts...

CVE-2026-25130

creationtimestamp| type| source ---|---|--- 2026-01-30 21:18:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdoa42xnk52o 2026-01-31 01:20:51+00:00| seen| https://gist.github.com/alon710/6005675fc930251c9d8000c9e9ab7e40 2026-04-30 07:31:10+00:00| seen|...

CVE-2026-21625

creationtimestamp| type| source ---|---|--- 2026-01-30 19:17:59+00:00| seen| Telegram/xCNGj1TTbKvLiecfleQbdSYCUg38GbVRhl26GliyFWoGt0...

CVE-2026-24855

creationtimestamp| type| source ---|---|--- 2026-01-30 18:14:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdnvsquj5d2r...

CVE-2025-7964

creationtimestamp| type| source ---|---|--- 2026-01-30 17:15:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdnsinvsfx2t 2026-02-02 06:24:24+00:00| published-proof-of-concept| https://t.me/poxek/5867...

CVE-2025-7014

Session Fixation vulnerability in QR Menu Pro Smart Menu Systems Menu Panel allows Session Hijacking.This issue affects Menu Panel: through 29012026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

OPENSUSE-SU-2026:20142-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2025-11021: Fixed out-of-bounds read in Cookie Date Handling of libsoup HTTP Library bsc1250562. - CVE-2026-0719: Fixed stack-based buffer overflow in NTLM authentication can lead to arbitrary code execution bsc1256399. - CVE-2026-0716:...

SUSE-SU-2026:20205-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2025-11021: Fixed out-of-bounds read in Cookie Date Handling of libsoup HTTP Library bsc1250562. - CVE-2026-0719: Fixed stack-based buffer overflow in NTLM authentication can lead to arbitrary code execution bsc1256399. - CVE-2026-0716:...

SUSE-SU-2026:20212-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2025-11021: Fixed out-of-bounds read in Cookie Date Handling of libsoup HTTP Library bsc1250562. - CVE-2026-0719: Fixed stack-based buffer overflow in NTLM authentication can lead to arbitrary code execution bsc1256399. - CVE-2026-0716:...

CVE-2026-25211

creationtimestamp| type| source ---|---|--- 2026-01-30 09:34:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdmyrhxu7r2m...

CVE-2026-22277

creationtimestamp| type| source ---|---|--- 2026-01-30 09:10:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115983268882462022 2026-01-30 09:24:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdmy7l4uug2c 2026-01-30 10:00:32+00:00| seen|...

CVE-2026-1686

creationtimestamp| type| source ---|---|--- 2026-01-30 07:49:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115982950420338424 2026-01-30 16:17:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdnpbjp4mf23 2026-01-30 16:17:57+00:00| seen|...

CVE-2025-61140

creationtimestamp| type| source ---|---|--- 2026-01-30 06:22:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdmnz3yolt27...

CVE-2026-24714

creationtimestamp| type| source ---|---|--- 2026-01-30 05:19:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdmkj66y7p2c 2026-01-30 06:00:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdmmrmxi4o2g 2026-02-02 21:26:47+00:00| seen|...

CVE-2026-24729

An unrestricted upload of file with dangerous type vulnerability exists in Interinfo DreamMaker’s file upload function, affecting versions before 2025/10/22. The root cause is an insufficient validation of uploaded files, enabling remote attackers to execute arbitrary system commands via a malici...

CVE-2026-24729 Interinfo DreamMaker - Unrestricted Upload of File with Dangerous Type

An unrestricted upload of file with dangerous type vulnerability in the file upload function of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to execute arbitrary system commands via a malicious class file...

CVE-2026-24728

The vulnerability CVE-2026-24728 affects Interinfo DreamMaker, specifically the /servlet/baServer3 endpoint. A missing authentication for a critical function allows remote attackers to access exposed administrative functionality without prior authentication in DreamMaker versions before 2025/10/2...

CVE-2026-25117

creationtimestamp| type| source ---|---|--- 2026-01-30 01:55:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdm743coqj2i 2026-02-12 04:00:05+00:00| seen| https://gist.github.com/alon710/9ee8ed6e03428c4711cc07304c9dacce...

CVE-2022-48986

creationtimestamp| type| source ---|---|--- 2026-01-30 01:30:59+00:00| seen| https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3mdm5q5bzrlp2 2026-02-06 13:45:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3me6zzvrufd2z...