CVE-2026-91098

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

CVE-2026-73442

On affected platforms running Arista EOS with VRRP enabled, the peer device VRRP authentication credentials are logged in cleartext on the switch, allowing an authenticated user with sufficient privileges to view agent trace logs or a system receiving forwarded log output to obtain the peer devic...

CVE-2026-19632

TranslatePress 密码重置链接泄露导致管理员账户接管 CVE： CVE-2026-19632 | CVSS： 9.8（严重） 通过 WordPress 的 TranslatePress 插件实现未认证账户接管。 从 CVE 发布到可用的 Day-One PoC 所用时间：5 小时 9 分 40 秒 影响版本至 3.3.1（含）；该问题已在 3.3.2 中修复。 TLDR TranslatePress 可以翻译 WordPress 外发的电子邮件，并将其翻译后的字符串保存到数据库中。 TranslatePress 还会将包含完整重置链接（含密钥）的密码重置邮件直接保存到翻译表中...

Inside-CVE-2026-20805-How-a-Windows-DWM-Flaw-Exposed-Sensitive-Data

深入解析 CVE-2026-20805：Windows DWM 漏洞如何泄露敏感数据 CVE‑2026‑20805：Windows 桌面窗口管理器（Desktop Window Manager）的一个缺陷，可导致本地信息泄露。需要低权限，无需用户交互。CVSS 评分为 5.5（中危）。已被积极利用，并列入 CISA KEV 目录；补丁已于 2026 年 1 月发布。 深入解析 CVE 2026 20805：Windows DWM 漏洞如何泄露敏感数据 1 执行摘要 CVE 2026 20805 是桌面窗口管理器（DWM）中的一个信息泄露缺陷——DWM 是渲染桌面、合成窗口以及加速基于 G...

CVE-2025-30208

🔥 CVE-2025-30208 Vite任意ファイル読み取り脆弱性スキャナー CVE-2025-30208向け高度な脆弱性スキャナー（エンタープライズグレードの機能搭載） Vite任意ファイル読み取り脆弱性検出のためのプロフェッショナルペネトレーションテストツール 🚀 クイックスタート • 📋 機能 • 🔧 使用方法 • 📊 例 • 🛡️ セキュリティ 📖 概要 これは、Vite開発サーバーの CVE-2025-30208...

CVE-2026-92720

creationtimestamp| type| source ---|---|--- 2026-09-16 19:00:10+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvnt5g54g22f 2026-09-16 20:08:04+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvnwwr2fvf2r...

EUVD-2026-81008

Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface gNPSI enabled, the gNPSI client credentials might be logged in clear text in local or remote accounting logs to authenticated users...

EUVD-2026-81007

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

EUVD-2026-81005

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

CVE-2026-91104 HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

CVE-2026-91101 HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

CVE-2026-91099

HP Linux Imaging and Printing (HPLIP) has been affected by multiple externally reported vulnerabilities across several software components. HP states the findings could potentially enable remote code execution , privilege escalation , denial of service , information disclosure , or unauthorized f...

CVE-2026-91098 HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

CVE-2020-35575-TP-LINK-TL-WR841ND-password-disclosure

CVE-2020-35575-パスワード開示問題-Webインターフェース 特定のTP-LinkデバイスのWebインターフェースにおけるパスワード開示の問題により、リモートの悪意のあるユーザーがWebパネルへの完全な管理アクセスを取得できます。これには、WA901NDデバイス（バージョン3.16.9201211betaより前）、およびArcher C5、Archer...

CVE-2026-85732

A flaw was found in oras-go, a Go library for managing OCI artifacts. This vulnerability allows a remote attacker to perform blind Server-Side Request Forgery SSRF against internal services by providing a specially crafted Link header URL during pagination operations. Although the response body i...

CVE-2025-14847

CVE-2025-14847 CVE-2025-14847 Vulnerability Environment with a PoC https://jira.mongodb.org/browse/SERVER-115508 SUMMARY This is a critical fix to address CVE-2025-14847. Upgrade to 8.2.3, 8.0.17, 7.0.28, 6.0.27, 5.0.32, or 4.4.30. ISSUE DESCRIPTION AND IMPACT An client-side exploit of the Server...

Moderate: Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update

An update for .NET 8.0 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...

CVE-2026-92605

IRIS through 2.4.29 fails to properly validate case authorization in comment listing endpoints for notes, tasks, IOCs, assets, and evidence items. Attackers with access to any single case can enumerate sequential object identifiers and read comment threads from cases they have no authorization to...

CVE-2026-47094

SIMAC MyPHR 1.1 contains an insecure direct object reference IDOR vulnerability that allows authenticated attackers to access and modify arbitrary employee records due to missing server-side ownership validation. Attackers can send a PUT request to the employee update endpoint with an arbitrary...