CVE-2026-59787

The Perl SNMP trap receiver script shipped with Zabbix does not properly neutralize the ZBXTRAP record delimiter in trap content. This means someone able to send SNMP traps can inject a record targeting another host, resulting in a loss of integrity...

CVE-2024-48589

phpAbook 9.0i - Vulnérabilité Cross-Site Scripting XSS CVE-2024-48589 Résumé : Une vulnérabilité Cross-Site Scripting XSS a été découverte dans le paramètre rol de index.php ou dans la section du chemin dans l'application phpAbook. Cette vulnérabilité permet à un attaquant d'injecter du code...

CVE-2025-41088

CVE-2025-41088: Хранимая XSS в Xibo CMS Я обнаружил уязвимость Хранимого межсайтового скриптинга Stored XSS в Xibo CMS v4.1.2. Эта уязвимость позволяет аутентифицированному злоумышленнику внедрять вредоносные скрипты в приложение из-за некорректной проверки вводимых пользователем данных. Проблема...

CVE-2007-3830

CVE-2007-3830 IBM Proventia Sensor Appliance — множественные уязвимости проверки входных данных Публикация на Exploit-db: https://www.exploit-db.com/exploits/30290/ Статья Exploit-db: https://www.exploit-db.com/docs/english/13081-having-fun-with-proventia-gx5108-&-gx5008-insecurities.pdf...

CVE-2024-46636-SQLi-MODAPS

CVE-2024-46636 est une vulnérabilité d'injection SQL identifiée dans le système MODAPS de NASA EOSDIS, causée par une validation incorrecte des entrées dans le paramètre category. Cette vulnérabilité permet aux attaquants d'accéder à des données sensibles et d'exécuter des requêtes SQL arbitraire...

CVE-2025-24963

CVE-2025-24963 - Режим браузера Vitest - Чтение локального файла CVE-2025-24963 — это уязвимость средней степени серьезности оценка CVSS 3.1: 5.9, затрагивающая пакет @vitest/browser, компонент фреймворка тестирования Vitest на основе Vite. Эта уязвимость возникает из-за неправильной проверки...

CVE-2026-20525

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

CVE-2026-20524

In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249004; Issue ID: MSV-9170...

CVE-2026-20525

A vulnerability exists in the Modem component due to improper input validation , which can lead to a system crash . This flaw could result in a remote denial of service if a User Equipment (UE) connects to an attacker-controlled rogue base station. Exploitation requires no additional execution pr...

CVE-2026-20525

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

CVE-2026-20525

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

EUVD-2026-92202

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

CVE-2026-20524

In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249004; Issue ID: MSV-9170...

EUVD-2026-92203

In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249004; Issue ID: MSV-9170...

CVE-2026-20524

In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249004; Issue ID: MSV-9170...

CVE-2026-20524

A memory corruption vulnerability exists in apu due to improper input validation. This flaw could allow an attacker to achieve local escalation of privilege without requiring additional execution privileges or user interaction. Remediation can be addressed using Patch ID: ALPS11249004 (Issue ID: ...

CVE-2025-0924-different

Autre vulnérabilité découverte lors de l'analyse de CVE-2025-0924 01. Aperçu du Stored XSS, WordPress et WP Activity Log 1 Aperçu du Stored XSS, WordPress et WP Activity Log Le Stored XSS XSS stocké est une vulnérabilité où un script malveillant est stocké sur le serveur et exécuté automatiquemen...

CVE-2025-55887

CVE-2025-55887 Description Une vulnérabilité de type Cross-Site Scripting XSS a été découverte dans le service de réservation de repas ARD. La vulnérabilité réside dans le paramètre GET transactionID de la page de confirmation de transaction. En raison d'une validation insuffisante des entrées et...

CVE-2026-20525: Reachable Assertion

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

PT-2026-106205

Name of the Vulnerable Software and Affected Versions Ghost versions 6.14.0 through 6.26.0 Description An input validation issue in this Node.js content management system may allow staff users to access local files located outside the intended data storage directories on the server. Recommendatio...