72339 matches found
MINI-QRHP-JWMW-JX4W
Bulletin has no description...
CVE-2026-46680 containerd user ID handling bypass allows runAsNonRoot evasion
containerd is an open-source container runtime. In versions prior to 1.7.32, 2.0.9, 2.2.4 and 2.3.1, containers launched with a numeric User directive that cannot be parsed as a 32-bit integer are incorrectly treated as a username, leading to runAsNonRoot evasion. If a crafted image provides an...
CVE-2026-34099
Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in jobinfo.php line 16: SELECT FROM jobs where id = '".$GET'id'."'. No authentication is required. An unauthenticated attacker can perform error-based SQL injection to extract the database version, current...
CVE-2026-7517
creationtimestamp| type| source ---|---|--- 2026-07-01 17:10:28+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mplz4clqbz2f...
CVE-2025-15646
creationtimestamp| type| source ---|---|--- 2026-07-01 16:41:36+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mplxiqamll2w 2026-07-02 01:58:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmwmxwxk62o 2026-07-02 06:27:27+00:00| seen|...
CVE-2026-20213
A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PE file...
CVE-2026-24245
creationtimestamp| type| source ---|---|--- 2026-07-01 16:21:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mplwf2i7xe26 2026-07-02 04:27:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn6woaywm2k...
CVE-2026-34111 Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speechmac_text.php
Guardian language-system passes the id GET parameter directly into a PHP exec call in speechmactext.php line 18 without sanitization: exec"php jobs/speechaudiomactext.php ".$loginsession." ".$GET'id'." ...". No authentication is required. An unauthenticated remote attacker can append shell...
CVE-2026-58027
creationtimestamp| type| source ---|---|--- 2026-07-01 16:14:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mplvyeiqtn2t 2026-07-02 04:28:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn6yv7vvy2d 2026-07-02 06:32:38+00:00| seen|...
CVE-2026-34102 Guardian Language-System SQL Injection via id Parameter in job_info_get.php
Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in jobinfoget.php line 16: SELECT FROM jobs where input1 = '".$GET'id'."'. An authenticated attacker can perform error-based SQL injection to extract database contents...
CVE-2026-34100 Guardian Language-System SQL Injection via id Parameter in media.php
Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in media.php line 17: SELECT id, filename, extension, type, duration, owner, private FROM files where id = '".$GET'id'."'. An authenticated attacker can perform error-based SQL injection to extract...
CVE-2026-34098 Guardian Language-System XSS via id Parameter in media.php
Guardian language-system fails to sanitize the id GET parameter before inserting it into HTML source and form action attributes in media.php lines 119, 129. An authenticated attacker can craft a URL that injects script tags executing in the victim's browser session...
CVE-2026-34097 Guardian Language-System XSS via id Parameter in text_file.php
Guardian language-system fails to sanitize the id GET parameter before inserting it into multiple HTML form action attributes in textfile.php lines 94, 101, 323, 403, 826, 852. An authenticated attacker can craft a URL that injects script tags executing in the victim's browser session...
CVE-2026-7532
creationtimestamp| type| source ---|---|--- 2026-07-01 16:00:17+00:00| seen| https://infosec.place/objects/c22b899e-0722-43cb-ba3c-e0f141edd0ce...
CVE-2026-24266
creationtimestamp| type| source ---|---|--- 2026-07-01 15:56:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpluxjpby625 2026-07-02 02:49:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmzhkzzk62t 2026-07-02 04:30:14+00:00| seen|...
ECHO-E703-119C-95BB
Bulletin has no description...
ECHO-A733-EBD9-180B
Bulletin has no description...
ECHO-861B-7499-77CA
Bulletin has no description...