227772 matches found
CVE-2026-73603
creationtimestamp| type| source ---|---|--- 2026-08-17 16:45:21+00:00| seen| https://www.acn.gov.it/portale/w/flowise-disponibili-poc-per-lo-sfruttamento-di-nuove-vulnerabilita...
CVE-2026-64865
New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to 1.0.0-rc.16, repeated PUT /api/user/self requests that update language or sidebarmodules can race relay billing because controller/user.go calls User.Update and updateUserCache performs a...
CVE-2026-73620
creationtimestamp| type| source ---|---|--- 2026-08-17 15:00:04+00:00| seen| https://t.me/bdufstecru/3388 2026-08-18 00:00:28+00:00| published-proof-of-concept| https://t.me/bdufstecru/3388...
MINI-3PRC-GHH9-VWMV
Bulletin has no description...
MINI-Q3FP-F7H2-PR4G
Bulletin has no description...
MINI-RPPQ-3F9W-FWG6
Bulletin has no description...
MINI-XJMJ-P7CJ-QVJM
Bulletin has no description...
MINI-6PG5-GPF5-GR2M
Bulletin has no description...
MINI-8PXV-5WXQ-4P54
Bulletin has no description...
ShieldBreak bypasses Microsoft’s patch for earlier Defender flaw
Microsoft Defender’s latest patch bypass shows a familiar problem. A newly disclosed Microsoft Defender flaw called ShieldBreak shows that fixing one attack path doesn't always close every route to the same result. Microsoft has assigned ShieldBreak the identifier CVE-2026-69414 and confirmed it ...
CVE-2026-74843
A vulnerability was determined in Wavlink WN531P3 and WN535M1 V250922. Affected by this vulnerability is the function strcpy of the file /etc/lighttpd/www/cgi-bin/exportpingortrace.cgi of the component Export Pingortrace CGI. Executing a manipulation of the argument HTTPCOOKIE can lead to...
Exploit for CVE-2026-41042
cve-2...
CVE-2026-74843 Wavlink WN531P3/WN535M1 Export Pingortrace CGI export_pingortrace.cgi strcpy stack-based overflow
A vulnerability was determined in Wavlink WN531P3 and WN535M1 V250922. Affected by this vulnerability is the function strcpy of the file /etc/lighttpd/www/cgi-bin/exportpingortrace.cgi of the component Export Pingortrace CGI. Executing a manipulation of the argument HTTPCOOKIE can lead to...
CVE-2026-74843
A vulnerability was determined in Wavlink WN531P3 and WN535M1 V250922. Affected by this vulnerability is the function strcpy of the file /etc/lighttpd/www/cgi-bin/exportpingortrace.cgi of the component Export Pingortrace CGI. Executing a manipulation of the argument HTTPCOOKIE can lead to...
CVE-2026-63649
A flaw was found in the Windows interactive service of OpenVPN. A local authenticated user could exploit this vulnerability by crafting specific options to bypass whitelist checks. This bypass allows the user to load arbitrary configuration files, which could lead to privilege escalation or other...
EUVD-2026-60078
A vulnerability was found in Kira-Pgr PromptShopMCP up to 5bc0cd17358e19a5415d11a531088170d7b81452. Affected is the function downloadimage of the file server.py of the component Image-Toolkit-MCP-Server. Performing a manipulation of the argument imageurl results in server-side request forgery. Th...
CVE-2026-19998
A weakness has been identified in code-projects Online Shopping System 1.0. Impacted is an unknown function of the file offersmail.php. Executing a manipulation of the argument email can lead to cross site scripting. The attack may be performed from remote. The exploit has been made available to...
CVE-2026-20000
A vulnerability was detected in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /viewprescriptionrecord.php. The manipulation of the argument delid results in sql injection. It is possible to launch the attack remotely. The exploit is now publi...
UBUNTU-CVE-2026-19999
A security vulnerability has been detected in Open Asset Import Library Assimp Assimp 17c12da. The affected element is the function Assimp::MDLImporter::ParseBoneTrafoKeys3DGSMDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component 3DGS MDL7 Bone Transformation Key Parser. The manipulati...