14858 matches found
EUVD-2026-9322
A flaw has been found in D-Link DIR-868L 110b03. This affects the function sub1BF84 of the component SSDP Service. This manipulation of the argument ST causes os command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. This vulnerability...
WordPress TheBi theme <= 1.0.5 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme TheBi versions = 1.0.5...
D-Link DIR-868L 操作系统命令注入漏洞
The D-Link DIR-868L is a wireless router produced by D-Link Corporation. The D-Link DIR-868L 110b03 version has a vulnerability related to operating system command injection. This vulnerability stems from incorrect handling of the parameter ST by the SSDP Service component, which may lead to...
PT-2026-22838
Name of the Vulnerable Software and Affected Versions GLPI Inventory Plugin versions prior to 1.6.6 Description The GLPI Inventory Plugin manages network discovery, inventory, software deployment, and data collection for GLPI agents. A reflected cross-site scripting XSS issue exists in task jobs...
WordPress Uncanny Automator - Easy Automation, Integration, Webhooks & Workflow Builder Plugin plugin <= 7.0.0.3 - Authenticated (Administrator+) Server-Side Request Forgery to Arbitrary File Upload vulnerability
WordPress Uncanny Automator - Easy Automation, Integration, Webhooks & Workflow Builder Plugin plugin = 7.0.0.3 - Authenticated Administrator+ Server-Side Request Forgery to Arbitrary File Upload vulnerability discovered by lucsob in WordPress Plugin Uncanny Automator versions = 7.0.0.3...
WordPress WP Food plugin < 2.7.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by benzdeus in WordPress Plugin WP Food versions 2.7.1...
CVE-2026-26694
creationtimestamp| type| source ---|---|--- 2026-03-02 16:02:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg3muodidu2o...
WordPress Maxify theme <= 1.0.16 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Maxify versions = 1.0.16...
WordPress Helion theme <= 1.1.12 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Helion versions = 1.1.12...
WordPress EmojiNation theme <= 1.0.12 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme EmojiNation versions = 1.0.12...
WordPress Progress theme <= 1.2 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Progress versions = 1.2...
OpenClaw Data Forgery Problem Vulnerability (CNVD-2026-13430)
OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw is vulnerable to a data forgery issue. The vulnerability stems from unauthenticated TXT records in discovery beacons, where certain clients treat the TXT values as authoritative routing/fixed inputs. An attacker...
VEcho: A Paradigm Shift from Vulnerability Verification to Proactive Discovery with Large Language Models
Static Application Security Testing SAST tools often suffer from high false positive rates, leading to alert fatigue that consumes valuable auditing resources. Recent efforts leveraging Large Language Models LLMs as filters offer limited improvements; however, these methods treat LLMs as passive,...
GHSA-9H8M-3FM2-QJRQ vulnerabilities
Vulnerabilities for packages: knative-net-istio-fips, boring-registry-fips, gitlab-workhorse-ce, tekton-chains-fips, sops, ferretdb, opencost, spicedb, kubescape-server, elastic-agent-fips, terragrunt, loki-fips, cri-tools, k3d, flux-notification-controller-fips, ksops, zarf,...
OESA-2026-1450 avahi security update
Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. This enables you to plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared...
CVE-2026-25147
creationtimestamp| type| source ---|---|--- 2026-02-27 17:14:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfu7ik7zfb2k 2026-03-04 00:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mg6z66ywo723...
WordPress Guff theme <= 1.0.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Guff versions = 1.0.1...
WordPress Aqualots theme <= 1.1.6 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Aqualots versions = 1.1.6...