CVE-2026-22904

creationtimestamp| type| source ---|---|--- 2026-02-09 08:18:33+00:00| seen| https://infosec.exchange/users/certvde/statuses/116039686717106372 2026-02-09 08:24:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mefzia5cpd25 2026-02-09 08:24:27+00:00| seen|...

CVE-2026-25858

creationtimestamp| type| source ---|---|--- 2026-02-08 00:00:56+00:00| seen| https://infosec.exchange/users/offseq/statuses/116032067514723066 2026-02-08 10:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3medq3l2nc724 2026-02-08 10:30:46+00:00| seen|...

CVE-2026-25644

creationtimestamp| type| source ---|---|--- 2026-02-06 23:22:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mea2bd4wba2g...

CVE-2026-25692

Not used...

BentoML v1.3.9 - Open Redirect

An open redirect vulnerability exists in BentoML v1.3.9, where the file parameter in the /ui/gradioapi/file= endpoint can be manipulated to redirect users to malicious websites. This could facilitate phishing attacks by tricking users into visiting attacker-controlled URLs. id: CVE-2024-12760 inf...

PT-2026-6023

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A flaw in the Windows kernel driver ProcessMonitorDriver.sys allows any user-mode application with a handle to the device to terminate arbitrary processes, including protected system processe...

CVE-2026-1287

creationtimestamp| type| source ---|---|--- 2026-02-03 15:53:03+00:00| seen| https://seclists.org/oss-sec/2026/q1/141 2026-02-03 17:16:15+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mdxugave7y2b 2026-02-13 00:46:46+00:00| seen|...

CVE-2025-71180

creationtimestamp| type| source ---|---|--- 2026-01-31 14:26:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115990172209554146 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen|...

CVE-2026-1637

creationtimestamp| type| source ---|---|--- 2026-01-29 19:41:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115980086235727489 2026-01-30 02:05:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdm7ny4xlv2t...

ECHO-C16B-48D0-7DA6

Bulletin has no description...

ECHO-EA09-CCA5-BA23

Bulletin has no description...

CVE-2025-41726

creationtimestamp| type| source ---|---|--- 2026-01-27 11:38:25+00:00| seen| https://infosec.exchange/users/certvde/statuses/115966863286149942 2026-01-27 11:38:33+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mdfobyoxp2c2 2026-01-27 12:02:48+00:00| seen|...

CVE-2018-14851

creationtimestamp| type| source ---|---|--- 2026-01-27 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-027-02...

CVE-2026-24830

creationtimestamp| type| source ---|---|--- 2026-01-27 10:05:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115966496664593357 2026-01-27 10:27:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdfkcuouhg2m 2026-01-27 12:25:53+00:00| seen|...

CVE-2026-1414 Sangfor Operation and Maintenance Security Management System HTTP POST Request get_Information getInformation command injection

A vulnerability was determined in Sangfor Operation and Maintenance Security Management System up to 3.0.12. This impacts the function getInformation of the file /equipment/getInformation of the component HTTP POST Request Handler. Executing a manipulation of the argument fortEquipmentIp can lead...

CVE-2026-23012

creationtimestamp| type| source ---|---|--- 2026-01-25 15:10:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdaz7qfiv62i 2026-01-25 15:34:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115956467313120586...

GHSA-X7V4-P4G4-F7V7

creationtimestamp| type| source ---|---|--- 2026-01-24 22:43:36+00:00| seen| https://gist.github.com/alon710/65d6df2ffba06917264d834b93896938...

GHSA-PC9J-5V36-2MWW

creationtimestamp| type| source ---|---|--- 2026-01-24 21:26:36+00:00| seen| https://gist.github.com/alon710/4168158bdc42a1017e72ec3633e1f2e1 2026-01-24 22:41:58+00:00| seen| https://gist.github.com/alon710/c011c67fa0cae97680cf3718a4db61e5...

EUVD-2026-4564

The ThemeRuby Multi Authors – Assign Multiple Writers to Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'before' and 'after' shortcode attributes in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it...

EUVD-2026-4579

The GZSEO plugin for WordPress is vulnerable to authorization bypass leading to Stored Cross-Site Scripting in all versions up to, and including, 2.0.11. This is due to missing capability checks on multiple AJAX handlers combined with insufficient input sanitization and output escaping on the...