65330 matches found
GHSA-GM37-52C6-37MW
creationtimestamp| type| source ---|---|--- 2026-08-08 02:32:35+00:00| seen| https://gist.github.com/alon710/6f3e0768fc0386f4c965af62333fef78...
GHSA-9HJ4-R449-HFVC
creationtimestamp| type| source ---|---|--- 2026-08-08 01:33:52+00:00| seen| https://gist.github.com/alon710/ad9de868f19ed1752a611a888e617195...
PT-2026-69215
Name of the Vulnerable Software and Affected Versions D-Link DWR-M961 hardware version C1 versions prior to 1.1.5 C1 202607071108 Description A command injection issue exists in the '/boafrm/formUSSDSetup' endpoint. A remote attacker can inject arbitrary malicious commands through the ussdValue a...
PT-2026-69220
Name of the Vulnerable Software and Affected Versions D-Link DWR-M961 hardware version C1 versions prior to 1.1.5 C1 202607071108 Description A command injection issue exists in the '/boafrm/formL2tpv3ConfigSetup' endpoint. A remote attacker can inject arbitrary malicious commands through the...
CVE-2026-64676
creationtimestamp| type| source ---|---|--- 2026-08-07 22:58:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ctob55wdrm6sp...
CVE-2026-71850
creationtimestamp| type| source ---|---|--- 2026-08-07 22:31:14+00:00| seen| https://gist.github.com/alon710/6634ad7314d99c5586618c1848016378 2026-08-08 00:01:19+00:00| seen| https://gist.github.com/alon710/6634ad7314d99c5586618c1848016378...
GHSA-F23P-VX2J-J53R
creationtimestamp| type| source ---|---|--- 2026-08-07 22:31:14+00:00| seen| https://gist.github.com/alon710/6634ad7314d99c5586618c1848016378 2026-08-08 00:01:19+00:00| seen| https://gist.github.com/alon710/6634ad7314d99c5586618c1848016378...
GHSA-5P4M-2WFM-XMQJ
creationtimestamp| type| source ---|---|--- 2026-08-07 22:06:55+00:00| seen| https://gist.github.com/gomesalexandre/8cd74b41b9830109d823dcb777041502...
CVE-2025-63235
creationtimestamp| type| source ---|---|--- 2026-08-07 21:51:08+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msjk2bvxxh2c 2026-08-08 07:01:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mskirwemci2y...
CVE-2026-9031
Summary: CVE-2026-9031 is an input validation vulnerability in the HTTP-WRITEOEM handler of the TP-Link Archer A6 web interface. The weakness stems from insufficient validation of user-supplied data before it is processed by internal flash-write handling logic. Impact (as documented): Successful ...
CVE-2026-9030 Authenticated Denial-of-Service in HTTPD Service in TP-Link Archer A6
A denial-of-service vulnerability exists in httpd service on Archer A6 v4 where the asynchronous systool instruction handlng path in httpd does not properly synchronize or safely manage concurrent systool operations. By sending crafted systool instructions through the asynchronous request path,...
CVE-2026-59717 Home Assistant Companion: `homeassistant://invite` Deep Link Credential Phishing
Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.6.1, the Android Companion app is vulnerable to an open redirect. The app passes the URL fragment from a homeassistant://invite deep link into the onboarding flow without ever displaying the...
CVE-2026-59717 Home Assistant Companion: `homeassistant://invite` Deep Link Credential Phishing
Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.6.1, the Android Companion app is vulnerable to an open redirect. The app passes the URL fragment from a homeassistant://invite deep link into the onboarding flow without ever displaying the...
CVE-2026-28144
creationtimestamp| type| source ---|---|--- 2026-08-07 20:15:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msjeoojgau22...
GHSA-FWG2-594C-JP42
creationtimestamp| type| source ---|---|--- 2026-08-07 19:36:23+00:00| seen| https://gist.github.com/alon710/81b96826f50cad7313904ff9c7c75f2e...
CVE-2024-40684
creationtimestamp| type| source ---|---|--- 2026-08-07 19:36:02+00:00| seen| https://bsky.app/profile/vulny-app.bsky.social/post/3msjcipa46424...
CVE-2025-71412
Injection of false emergency or status messages over CPDLC may lead to misallocation of resources, operational confusion, and improper response actions by flight crews, traffic controllers, and ground operations. This type of attack can be carried out remotely over radio frequency...
CVE-2025-71413
Malformed or out-of-sequence frames at the Aviation Very High Frequency Link Control X.25 layers cause repeated resets which may result in increased workload and reduced situational awareness. This type of attack can be carried out remotely over radio frequency...
CVE-2025-71410
Unnumbered Disconnect U DISC and malformed Aviation Very High Frequency Link Control frames can terminate sessions and lead to a loss of CPDLC functions requiring a reversion to voice communication and increased controller workload. This type of attack can be carried out remotely over radio...