83967 matches found
Previously Convicted Dutch Hacker Arrested in ShinyHunters Odido Probe
Dutch police arrested convicted hacker Pepijn van der Stap in the ShinyHunters probe into the Odido breach, which exposed data belonging to millions of customers...
CVE-2026-70413
Dell Live Optics Collector, versions prior to 27.2.13.310, contains a Use of Hard-coded Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...
USN-8839-1: Atril vulnerabilities
It was discovered that Atril did not properly sanitize command-line arguments in PDF /GoToR actions. If a user opened a specially crafted PDF file, an attacker could possibly use this issue to execute arbitrary code. CVE-2026-46529 It was discovered that Atril incorrectly handled certain PDF file...
USN-8839-1 atril vulnerabilities
It was discovered that Atril did not properly sanitize command-line arguments in PDF /GoToR actions. If a user opened a specially crafted PDF file, an attacker could possibly use this issue to execute arbitrary code. CVE-2026-46529 It was discovered that Atril incorrectly handled certain PDF file...
CVE-2026-70413
Dell Live Optics Collector, versions prior to 27.2.13.310, contains a Use of Hard-coded Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...
CVE-2026-70413
Dell Live Optics Collector versions prior to 27.2.13.310 are vulnerable to a Use of Hard-coded Password vulnerability. A low privileged attacker with local access could potentially exploit this flaw, resulting in Information exposure . Remediation is available via security update DSA-2026-339 . N...
CVE-2026-70413
Dell Live Optics Collector, versions prior to 27.2.13.310, contains a Use of Hard-coded Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...
EUVD-2026-88310
Dell Live Optics Collector, versions prior to 27.2.13.310, contains a Use of Hard-coded Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...
CVE-2017-8225-EXPLOIT
CVE-2017-8225 - GoAhead System.ini の情報漏えい この脆弱性は、Wireless IP Camera P2P WIFICAM デバイスに関連します。重要な認証情報を格納する .ini ファイルの検証が正しく行われないことに起因します。熟練した攻撃者は、URI 内の loginuse および loginpas パラメータの両方に空の値を指定することで、この脆弱性を悪用できます。具体的には、パス /system.ini?loginuse&loginpas を介してアクセスが許可されます。 エクスプロイトの詳細...
CVE-2018-9995-EXPLOIT
CVE-2018-9995 - DVR認証バイパス このリポジトリは、CVE-2018-9995として識別されるセキュリティ脆弱性に対処するものです。この脆弱性は、TBK DVR4104、DVR4216、Novo、CeNova、QSee、Pulnix、XVR 5 in 1、Securus、Night OWL、DVR Login、HVR Login、MDVR Loginなど、さまざまなDVRデバイスに影響を及ぼします。これらのデバイスは、元のTBK...
CVE-2026-82932
mH-DEVELOPER smart home module does not load any firewall rules at startup. This leaves all listening services, including SSH, HTTP, WebSocket, and Node-RED, fully exposed on the LAN without access control. Any client on the same network can reach every service. This issue was fixed in...
CVE-2026-93805
A flaw was found in the Linux kernel's cfg80211 wireless subsystem. The kernel fails to properly validate the length of wireless management frames before accessing subtype-specific data fields. An attacker within wireless range could exploit this flaw by transmitting malformed, truncated manageme...
Security update for erlang27
This update for erlang27 fixes the following issues: CVE-2026-42792: epmd permanent DoS via EMFILE on accept2 in erts bsc1272908. CVE-2026-47078: Relative path traversal in zip:unzip/zip:extract via checkdirlevel depth-counter bypass bsc1272909. CVE-2026-48855: Exposure of Sensitive Information t...
CVE-2026-82932 Missing Firewall Configuration in mH-DEVELOPER
mH-DEVELOPER smart home module does not load any firewall rules at startup. This leaves all listening services, including SSH, HTTP, WebSocket, and Node-RED, fully exposed on the LAN without access control. Any client on the same network can reach every service. This issue was fixed in...
EUVD-2026-88231
mH-DEVELOPER smart home module does not load any firewall rules at startup. This leaves all listening services, including SSH, HTTP, WebSocket, and Node-RED, fully exposed on the LAN without access control. Any client on the same network can reach every service. This issue was fixed in...
CVE-2026-82932
The mH-DEVELOPER smart home module contains a security flaw where it fails to load any firewall rules at startup. This configuration oversight leaves all listening services, such as SSH , HTTP , WebSocket , and Node-RED , fully exposed on the local area network (LAN) without any access control. C...
WordPress WPMobile.App plugin <= 11.83 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Peter Tang in WordPress Plugin WPMobile.App versions = 11.83...
Security update for nodejs16
This update for nodejs16 fixes the following issues: CVE-2025-23085: memory leak when remote peer abruptly closes socket without sending GOAWAY notification bsc1236250. CVE-2025-23166: improper error handling in async cryptographic operations crashes process bsc1243218. CVE-2025-23167: llhttp:...
SUSE-SU-2026:4355-1 Security update for nodejs16
This update for nodejs16 fixes the following issues: - CVE-2025-23085: memory leak when remote peer abruptly closes socket without sending GOAWAY notification bsc1236250. - CVE-2025-23166: improper error handling in async cryptographic operations crashes process bsc1243218. - CVE-2025-23167:...
