CVE-2026-23740

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, when astcoredumper writes its gdb init and output files to a directory that is world-writable for example /tmp, an attacker with write permissionwhich is a...

CVE-2026-23740

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, when astcoredumper writes its gdb init and output files to a directory that is world-writable for example /tmp, an attacker with write permissionwhich is a...

CVE-2026-23739

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, the astxmlopen function in xml.c parses XML documents using libxml with unsafe parsing options that enable entity expansion and XInclude processing...

CVE-2026-23738

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, user supplied/control values for Cookies and any GET variable query Parameter are directly interpolated into the HTML of the page using aststrappend. The...

CVE-2026-0665

creationtimestamp| type| source ---|---|--- 2026-02-06 14:39:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116024196776648851...

CVE-2026-24926

creationtimestamp| type| source ---|---|--- 2026-02-06 08:47:46+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116022814553754757 2026-02-06 09:17:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me6l34eepx27...

DCN DCME-320 命令注入漏洞

DCN DCME-320 is an Internet exchange gateway router developed by China's DCN Technology Co., Ltd. Versions of DCN DCME-320 prior to 20260121 contained a command injection vulnerability. This vulnerability stemmed from incorrect operations with the parameter iplist in the function applyconfig with...

CVE-2026-23098

creationtimestamp| type| source ---|---|--- 2026-02-05 06:42:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116016659253283238 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-07 18:00:00+00:00| seen|...

CVE-2026-25049

creationtimestamp| type| source ---|---|--- 2026-02-04 21:01:03+00:00| seen| https://threatintel.cc/2026/02/04/critical-nn-flaws-disclosed-along.html 2026-02-04 21:23:59+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/116014464225155765 2026-02-04 21:27:57+00:00| seen|...

CVE-2026-23104

creationtimestamp| type| source ---|---|--- 2026-02-04 17:11:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116013471757139820...

CVE-2026-23077

creationtimestamp| type| source ---|---|--- 2026-02-04 16:58:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116013418819173215...

CVE-2026-1592

creationtimestamp| type| source ---|---|--- 2026-02-03 16:48:40+00:00| seen| https://threatintel.cc/2026/02/03/foxit-pdf-editor-vulnerabilities-let.html 2026-02-03 17:48:34+00:00| seen| https://infosec.exchange/users/edwardk/statuses/116007954860312788 2026-02-04 17:20:10+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2025-14559

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the keycloak-services component of Keycloak. This vulnerability allows the issuance of access and refresh tokens for disabled users, leading...

CVE-2022-50980 Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset change via CAN

A unauthenticated adjacent attacker could potentially disrupt operations by switching between multiple configuration presets via CAN...

CLSA-2026-1770040871 Fix CVE(s): CVE-2023-4781

Fix CVE-2023-4781.patch - debian/patches/CVE-2023-4781.patch: patch winexchange instead of winrotate...

Keycloak x < 26.4.9 / 26.5.x < 26.5.2 Token Exchange Vulnerability

The version of Keycloak installed on the remote host is prior to 26.4.9 / 26.5.2 / 26.6.0. It is, therefore, affected by the following Token Exchange vulnerability: - A flaw was found in the keycloak-services component of Keycloak. This vulnerability allows the issuance of access and refresh toke...

SUSE CVE-2025-71183

In the Linux kernel, the following vulnerability has been resolved: btrfs: always detect conflicting inodes when logging inode refs After rename exchanging either with the rename exchange operation or regular renames in multiple non-atomic steps two inodes and at least one of them is a directory,...

CVE-2025-71180

creationtimestamp| type| source ---|---|--- 2026-01-31 14:26:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115990172209554146 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen|...

CVE-2025-71183

In the Linux kernel, the following vulnerability has been resolved: btrfs: always detect conflicting inodes when logging inode refs After rename exchanging either with the rename exchange operation or regular renames in multiple non-atomic steps two inodes and at least one of them is a directory,...

CVE-2025-71183

In the Linux kernel, the following vulnerability has been resolved: btrfs: always detect conflicting inodes when logging inode refs After rename exchanging either with the rename exchange operation or regular renames in multiple non-atomic steps two inodes and at least one of them is a directory,...