13218 matches found
EUVD-2026-67890
Incorrect access control in the getWiFiBasicCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain core wireless settings, including SSIDs and Wi-Fi keys, via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-51649
Incorrect access control in the getDiagnosisCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain diagnostic configuration and ping log contents via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
PT-2026-83149
Author Remote Code Execution RCE in Rank Math SEO = 1.0.276 versions...
PT-2026-83145
Contributor Broken Access Control in ACF Extended = 0.9.2.6 versions...
PT-2026-83063
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description No information is available regarding the nature of this issue. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...
EUVD-2026-67909
Incorrect access control in the getSysStatusCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain sensitive information such as operation mode, firmware version, serial number, WAN/LAN IP addresses, WiFi SSID, encryption keys, and connected client statistics...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: unzip (UTSA-2025-002254)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002254 advisory. Buffer overflow in the zishort function in zipinfo.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service crash via a large compression method...
PT-2026-83150
Contributor Broken Access Control in WpEvently = 5.5.0 versions...
PT-2026-83147
Subscriber Insecure Direct Object References IDOR in WP Job Portal = 2.5.9 versions...
PT-2026-82874
The User Frontend WordPress plugin before 4.3.10 does not restrict access to its user directory search endpoint, allowing unauthenticated attackers to retrieve the email address and phone number of every registered user, including administrators...
PT-2026-83070
Name of the Vulnerable Software and Affected Versions dovecot versions prior to 2.4.5-1.1 Description A host configured as a trusted proxy can send forwarding information containing a NUL byte. This causes the login process to crash during the subsequent login attempt, leading to process...
CVE-2026-51660
The TOTOLINK T6 router, running firmware version 4.1.5cu.748_B20211015 , is susceptible to an incorrect access control vulnerability in the getIpPortFilterRules function. This flaw allows unauthenticated attackers to obtain sensitive IP and port filtering rules by sending a crafted POST request t...
PT-2026-82971
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The register pid function contains multiple flaws when processing untrusted perf.data. An integer overflow can occur on 32-bit systems when a large pid is used, leading to out-of-bounds...
EUVD-2026-67308
Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.14.0 through 4.14.6, an authenticated low-privilege user can read the cluster secret from the manager configuration because the logic that masks sensitive values is...
GHSA-Q7M3-RHXG-7VXR
creationtimestamp| type| source ---|---|--- 2026-08-27 22:31:50+00:00| seen| https://gist.github.com/alon710/796cb46fa1a6e144f351d5ffd2b774d8 2026-08-28 00:01:49+00:00| seen| https://gist.github.com/alon710/796cb46fa1a6e144f351d5ffd2b774d8...
CVE-2026-18885
creationtimestamp| type| source ---|---|--- 2026-08-27 22:08:35+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu3udv6djg2m 2026-08-28 03:02:20+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mu4eqr6anp2y 2026-08-28 07:50:09+00:00| seen|...
CVE-2026-81934
creationtimestamp| type| source ---|---|--- 2026-08-27 21:00:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu3qk5iz6s2m 2026-08-27 22:09:35+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu3ufoxuoy2p 2026-08-28 08:10:05+00:00| seen|...
CVE-2025-51679
creationtimestamp| type| source ---|---|--- 2026-08-27 20:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu3pfnl26h2t...
CVE-2025-70290
creationtimestamp| type| source ---|---|--- 2026-08-27 20:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu3obvfbwy2m 2026-08-28 00:01:20+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mu42nilght2s 2026-08-28 21:35:41+00:00| seen|...