CVE-2026-0779

creationtimestamp| type| source ---|---|--- 2026-01-09 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-001/...

PT-2026-2052

Name of the Vulnerable Software and Affected Versions Samsung KNOX versions prior to SMR Jan-2026 Release 1 Description A use-after-free race condition exists in the PROCA process authenticator kernel driver, a proprietary subsystem designed to prevent unauthorized process execution. The issue...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Jan-2026 Release 1, which stems from improper access control and could...

PT-2026-2050

Name of the Vulnerable Software and Affected Versions SecSettings versions prior to SMR Jan-2026 Release 1 Description A flaw exists in SecSettings due to improper input validation. This allows a local attacker to access a file with system privileges. User interaction is required to trigger this...

PT-2026-2051

Name of the Vulnerable Software and Affected Versions SLocation versions prior to SMR Jan-2026 Release 1 Description An improper access control issue exists in SLocation. This allows local attackers to execute privileged APIs. Recommendations Update SLocation to SMR Jan-2026 Release 1 or later...

PT-2026-2054

Name of the Vulnerable Software and Affected Versions libimagecodec.quram.so versions prior to SMR Jan-2026 Release 1 Description An out-of-bounds read issue exists in libimagecodec.quram.so. This allows a remote attacker to access memory outside of the intended boundaries. The issue is present i...

WordPress Client Testimonial Slider plugin <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aft_testimonial_meta_name' Metabox Field vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'afttestimonialmetaname' Metabox Field vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Client Testimonial Slider versions = 2.0...

mysql: mariadb: High Privilege Denial of Service Vulnerability in MySQL Server (CPU Jan 2025)

A flaw was found in the MySQL Server component: InnoDB. This vulnerability allows a high-privileged attacker to cause a denial of service, which causes frequent crashes or hangs, via multiple network protocols...

mysql: mariadb: High Privilege Denial of Service Vulnerability in MySQL Server (CPU Jan 2025)

A flaw was found in the MySQL Server component: InnoDB. This vulnerability allows a high-privileged attacker to cause a denial of service, which causes frequent crashes or hangs, via multiple network protocols...

GHSA-7VHP-VF5G-R2FW

creationtimestamp| type| source ---|---|--- 2026-01-07 23:09:29+00:00| seen| Telegram/FpDGAESLT2b6cAqL19jI0amMTjRd3R14Wu3P5pTmHCNxdqI...

CVE-2026-21855 Tarkov Data Manager has Unauthenticated Reflected XSS

The Tarkov Data Manager is a tool to manage the Tarkov item data. Prior to 02 January 2025, a reflected Cross Site Scripting XSS vulnerability in the toast notification system allows any attacker to execute arbitrary JavaScript in the context of a victim's browser session by crafting a malicious...

CVE-2026-21855

The CVE-2026-21855 entry concerns Tarkov Data Manager. A reflected XSS in the toast notification system allowed an attacker to execute arbitrary JavaScript in a victim’s browser session via a crafted URL, affecting versions prior to 02 January 2025. A series of fix commits on 02 January 2025 addr...

CVE-2026-21854 Tarkov Data Manager Authentication Bypass vulnerability

The Tarkov Data Manager is a tool to manage the Tarkov item data. Prior to 02 January 2025, an authentication bypass vulnerability in the login endpoint allows any unauthenticated user to gain full admin access to the Tarkov Data Manager admin panel by exploiting a JavaScript prototype property...

CVE-2026-21854

CVE-2026-21854 affects the Tarkov Data Manager. The vulnerability is an authentication bypass in the login endpoint, enabling unauthenticated access to the admin panel via a JavaScript prototype property access vulnerability combined with loose equality type coercion. Affected are versions prior ...

EUVD-2026-1399

The Tarkov Data Manager is a tool to manage the Tarkov item data. Prior to 02 January 2025, an authentication bypass vulnerability in the login endpoint allows any unauthenticated user to gain full admin access to the Tarkov Data Manager admin panel by exploiting a JavaScript prototype property...

CVE-2026-22536

creationtimestamp| type| source ---|---|--- 2026-01-07 18:07:02+00:00| seen| Telegram/BnTAIC0iodkqMq4D8miTs1BNlTWY2vPbrNPo5ViH8Dm-XRI 2026-01-07 18:07:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbu2ordrth22 2026-01-07 18:40:06+00:00| seen|...

CVE-2025-69263

creationtimestamp| type| source ---|---|--- 2026-01-07 00:38:43+00:00| published-proof-of-concept| https://github.com/pnpm/pnpm/security/advisories/GHSA-7vhp-vf5g-r2fw 2026-01-07 22:56:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbukta7kpl22 2026-01-07 23:09:29+00:00| seen|...

PT-2026-2102

Name of the Vulnerable Software and Affected Versions Tarkov Data Manager versions prior to 02 January 2025 Description The Tarkov Data Manager, a tool for managing Tarkov item data, contains an authentication bypass issue in the login endpoint. This allows any unauthenticated user to gain full...

PT-2026-2099

CVE-2026-21749 - Apache CSRF CVE ID : CVE-2026-21749 Published : Jan. 6, 2026, 4:15 a.m. | 1 hour, 39 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE-2025-68428

creationtimestamp| type| source ---|---|--- 2026-01-05 23:05:27+00:00| seen| Telegram/DM3pgu0RzgLvzG-bb0EsBJeE-HNavxIR4FBWximsYdDyCg 2026-01-06 00:12:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbpo5ok4pf2y 2026-01-06 06:36:57+00:00| seen|...