58659 matches found
CVE-2026-27144
creationtimestamp| type| source ---|---|--- 2026-04-08 04:18:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mixgtgp6sn25 2026-04-13 21:22:02+00:00| seen| Telegram/LHQfgYAbtuG7CogYZyWoKm7-py5GuHojGsIqn2GfOFcZFnQ 2026-05-07 18:20:11+00:00| seen|...
CVE-2026-24511
creationtimestamp| type| source ---|---|--- 2026-04-08 04:16:40+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-24511 2026-04-08 15:17:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miylmna5ef2i...
CVE-2026-4656
creationtimestamp| type| source ---|---|--- 2026-04-08 00:10:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwywfzpgf22...
D-Link DI-8003 安全漏洞
The D-Link DI-8003 is a wireless router from China-based AUO D-Link. A buffer overflow vulnerability exists in the D-Link DI-8003. The vulnerability is caused due to improper handling of the id parameter in the /saveparmusb.asp endpoint and can be exploited by an attacker to cause a denial of...
PHPGurukul Online Course Registration SQL注入漏洞
PHPGurukul Online Course Registration is an online course registration system provided by PHPGurukul Corporation. Version 3.1 of PHPGurukul Online Course Registration contains a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter ‘cid’ in the file...
WordPress plugin Blog2Social: Social Media Auto Post & Scheduler 安全漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...
CVE-2025-50652
The CVE-2025-50652 entry concerns the D-Link DI-8003 (16.07.26A1) and an improper handling of the id parameter in the /saveparm_usb.asp endpoint. Connected sources (CNVD-2026-17630) describe a buffer overflow that can be exploited to cause a denial of service. Other feeds corroborate the same des...
PT-2026-31303
Name of the Vulnerable Software and Affected Versions pretix version 2025 Description A new API endpoint in pretix 2025 incorrectly returns all check-in events belonging to the organizer instead of the specific event. This allows an API consumer to access information for all events under the same...
CVE-2025-50654
CVE-2025-50654 concerns the D-Link DI-8003 router. Connected sources confirm a buffer overflow vulnerability arising from improper validation of the id parameter in the /thd_member.asp endpoint. CNVD-2026-17634 states this can be exploited by an attacker to cause a denial of service. NVD data des...
PT-2026-31311
Name of the Vulnerable Software and Affected Versions Web Terminal images affected versions not specified Description A container privilege escalation flaw exists due to the /etc/passwd file being created with group-writable permissions during the build process. An attacker with command execution...
PT-2026-31097
The Columns by BestWebSoft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' shortcode attribute of the print clmns shortcode in all versions up to and including 1.0.3. This is due to insufficient input sanitization and output escaping on the 'id' attribute. The...
RHEL 8 : grafana (RHSA-2026:7011)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:7011 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: net/url: Incorrect...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006772)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006772 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: fix potential struct net leak in inet6rtmgetaddr It seems that if userspace provides a...
CVE-2025-50671
CVE-2025-50671 describes a buffer overflow in D-Link DI-8003 firmware (16.07.26A1) caused by improper bounds checking in the /xwgl_ref.asp endpoint. An attacker can trigger by sending crafted HTTP GET requests with excessively long values for parameters such as name, en, user_id, shibie_name, tim...
PT-2026-31377
CVE-2025-50652 An issue in D-Link DI-8003 16.07.26A1 related to improper handling of the id parameter in the /saveparm usb.asp endpoint. https://t.co/4eH05VoBNA...
PT-2026-31310
A container privilege escalation flaw was found in certain Multicluster Engine for Kubernetes images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected containe...
CVE-2025-50654
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper validation of the id parameter in the /thdmember.asp endpoint...
CVE-2025-50652
An issue in D-Link DI-8003 16.07.26A1 related to improper handling of the id parameter in the /saveparmusb.asp endpoint...
PT-2026-31307
Name of the Vulnerable Software and Affected Versions Wimi Teamwork On-Premises versions prior to 8.2.0 Description Wimi Teamwork On-Premises versions prior to 8.2.0 contain an insecure direct object reference issue in the /preview.php endpoint. The item id parameter does not have sufficient...