24519 matches found
CVE-2026-8228
creationtimestamp| type| source ---|---|--- 2026-05-10 08:02:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlicalqyfi2i...
CVE-2026-8241
A vulnerability has been found in Industrial Application Software IAS Canias ERP 8.03. The affected element is the function iasGetServerInfoEvent of the component RMI Interface. Such manipulation leads to improper authorization. The attack can be executed remotely. The exploit has been disclosed ...
CVE-2026-8241 Industrial Application Software IAS Canias ERP RMI iasGetServerInfoEvent improper authorization
A vulnerability has been found in Industrial Application Software IAS Canias ERP 8.03. The affected element is the function iasGetServerInfoEvent of the component RMI Interface. Such manipulation leads to improper authorization. The attack can be executed remotely. The exploit has been disclosed ...
CVE-2026-8241
The CVE-2026-8241 entry concerns Industrial Application Software IAS Canias ERP 8.03, where the RMI Interface’s iasGetServerInfoEvent function allows improper authorization. The vulnerability is exploitable remotely and has had public disclosure. Connected data indicates a NETWORK-accessible issu...
CVE-2026-8217
creationtimestamp| type| source ---|---|--- 2026-05-10 04:30:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlhwgbfuff2h...
CVE-2026-8211
creationtimestamp| type| source ---|---|--- 2026-05-10 01:34:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlhmlp3n5q2r...
CVE-2026-8215
A vulnerability was determined in Industrial Application Software IAS Canias ERP 8.03. This vulnerability affects the function iasRequestFileEvent of the component RMI Interface. This manipulation of the argument mstrSourceFileName causes path traversal. The attack can be initiated remotely. The...
CVE-2026-8215 Industrial Application Software IAS Canias ERP RMI iasRequestFileEvent path traversal
A vulnerability was determined in Industrial Application Software IAS Canias ERP 8.03. This vulnerability affects the function iasRequestFileEvent of the component RMI Interface. This manipulation of the argument mstrSourceFileName causes path traversal. The attack can be initiated remotely. The...
CVE-2026-8215
A vulnerability was determined in Industrial Application Software IAS Canias ERP 8.03. This vulnerability affects the function iasRequestFileEvent of the component RMI Interface. This manipulation of the argument mstrSourceFileName causes path traversal. The attack can be initiated remotely. The...
CVE-2026-8215
CVE-2026-8215 affects Industrial Application Software IAS Canias ERP 8.03, specifically the RMI Interface function iasRequestFileEvent. The vulnerability arises from manipulating the m_strSourceFileName argument, enabling path traversal. Attacks can be initiated remotely and publicly disclosed ex...
CVE-2026-8215 Industrial Application Software IAS Canias ERP RMI iasRequestFileEvent path traversal
A vulnerability was determined in Industrial Application Software IAS Canias ERP 8.03. This vulnerability affects the function iasRequestFileEvent of the component RMI Interface. This manipulation of the argument mstrSourceFileName causes path traversal. The attack can be initiated remotely. The...
Exponent CMS 跨站脚本漏洞
Exponent CMS is a website content management system provided by the Exponent company, offering capabilities for page management and modular content editing. Version 2.6 of Exponent CMS contains a cross-site scripting vulnerability. This vulnerability stems from storage-based cross-site scripting...
CVE-2026-42296
creationtimestamp| type| source ---|---|--- 2026-05-09 04:54:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlfhcf56ni2p 2026-05-09 17:09:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlgqe2brll2f...
SUSE CVE-2026-43167
In the Linux kernel, the following vulnerability has been resolved: xfrm: always flush state and policy upon NETDEVUNREGISTER event syzbot is reporting that "struct xfrmstate" refcount is leaking. unregisternetdevice: waiting for netdevsim0 to become free. Usage count = 2 reftracker:...
CVE-2026-42298
creationtimestamp| type| source ---|---|--- 2026-05-08 23:24:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mleuu5h24l2e 2026-05-09 01:13:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlf2wfsfch2p 2026-05-09 03:00:31+00:00| seen|...
CVE-2026-43373
A flaw was found in the Linux kernel, specifically within the Network Controller Sideband Interface NCSI subsystem. This vulnerability occurs in the NCSI RX and Asynchronous Event Notification AEN handlers, where early return paths fail to release received socket buffers skb when processing inval...
NPM: eventsource-encoder vulnerable to SSE event injection via unsanitized `event` and `id` fields
NPM: eventsource-encoder vulnerable to SSE event injection via unsanitized event and id fields vulnerability discovered by ? in WordPress Npm eventsource-encoder versions = 1.0.1...
eventsource-encoder vulnerable to SSE event injection via unsanitized `event` and `id` fields
Summary eventsource-encoder does not sanitize the event or id fields of an EventSourceMessage before serializing them. An attacker who controls either field can inject arbitrary Server-Sent Events line terminators \n, \r, or \r\n and thereby forge additional SSE fields or entire messages on the...
HTTP Response Splitting
Overview eventsource-encoder is an Encodes events as well-formed EventSource/Server Sent Event SSE messages Affected versions of this package are vulnerable to HTTP Response Splitting via unsanitized event and id fields in the encoding process. An attacker can inject arbitrary Server-Sent Events...