66098 matches found
PT-2026-44755
The Link Whisper Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the user id parameter in all versions up to, and including, 0.9.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
📄 D-Link DSL2600U Password Disclosure
D-Link DSL2600U suffers from an administrative password disclosure vulnerability. Exploit Title: D-Link DSL2600U - 'rom-0' Admin Password Disclosure Date: 2026-05-02 Exploit Author: Amir Hossein Jamshidi Vendor Homepage: https://www.dlink.com Version: DSL-2600U Tested on: ubuntu CVE : N/A Firmwar...
n8n-MCP 安全漏洞
n8n-MCP is a model context protocol server developed by Romuald Członkowski, an individual developer. Versions of n8n-MCP prior to 2.51.3 contained security vulnerabilities. These vulnerabilities stemmed from the fact that the workflow telemetry cleaner might retain fragments of URL shape node...
SUSE SLES15 Security Update : rsync (SUSE-SU-2026:2083-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2083-1 advisory. This update for rsync fixes the following issues - CVE-2026-29518: Symlink-Race TOCTOU in Daemon bsc1264511. - CVE-2026-41035: coun...
ROS-20260529-73-0021
The vulnerability in opensearch relates to the use of a name with an incorrect link. Exploiting this vulnerability could allow a perpetrator to cause a service failure...
TP-Link TL-SG108PE 安全漏洞
The TP-Link TL-SG108PE is an 8-port Gigabit Ethernet intelligent managed PoE switch from TP-Link Corporation. The TP-Link TL-SG108PE v5 has a security vulnerability, which stems from improper cleaning of SYSNAM configuration parameters during the file configuration import process in the web...
ROS-20260529-73-0002
The vulnerability in opensearch relates to the use of a name with an incorrect link. Exploiting this vulnerability could allow a perpetrator to cause a service failure...
PT-2026-44972
Name of the Vulnerable Software and Affected Versions TP-Link TL-SG108PE v5 affected versions not specified Description A stored cross-site scripting XSS issue exists in the web management interface. This occurs because the SYSNAM configuration parameter is not properly sanitized during the...
PT-2026-53222
Name of the Vulnerable Software and Affected Versions D-Link DCS-935L version 1.10.01 Description An OS command injection issue exists in the POST Parameter Handler component of the setconf.cgi file. The vulnerability occurs within the sub 400E40 function due to the failure to neutralize special...
Vim < 9.2.0383 OS Command Injection in netrw (GHSA-85ch-p2qr-m5gx)
The version of Vim installed on the remote host is prior to 9.2.0383. It is, therefore, affected by a vulnerability as referenced in the GHSA-85ch-p2qr-m5gx advisory. - An OS command injection vulnerability exists in the netrw standard plugin bundled with Vim. The suffix extraction logic in...
CVE-2026-6891
CVE-2026-6891 affects My Image Garden for macOS (version 3.6.8 or earlier). The installer improperly handles symbolic links, enabling a local user with login privileges to exploit a specially crafted symbolic link during installation to modify permissions on files they normally wouldn’t be author...
CVE-2026-45343
creationtimestamp| type| source ---|---|--- 2026-05-28 23:49:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmx7k4dw572k...
CVE-2026-46827
creationtimestamp| type| source ---|---|--- 2026-05-28 23:41:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmx74m6puz2p 2026-06-04 00:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mngddmeksl25...
CVE-2026-46826
creationtimestamp| type| source ---|---|--- 2026-05-28 23:30:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmx6isfqoe2x 2026-06-03 23:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mngbnvoka32o...
CVE-2026-35277
creationtimestamp| type| source ---|---|--- 2026-05-28 22:34:37+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mmx3ennnnk23 2026-06-04 01:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mngieinue22s...
CVE-2026-49130
creationtimestamp| type| source ---|---|--- 2026-05-28 22:03:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwzn5yp5f2e...
CVE-2026-46834
creationtimestamp| type| source ---|---|--- 2026-05-28 22:01:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwzijx34t2z 2026-05-29 14:45:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmyrm2jspk2x...
CVE-2026-49129
creationtimestamp| type| source ---|---|--- 2026-05-28 21:58:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwze7lssy2e...
CVE-2026-46231
A flaw was found in the Linux kernel's batman-adv Better Approach To Mobile Ad-hoc Networking - Advanced Basic Link Arbitration BLA module. When the batadvblaaddclaim function fails to insert a new claim into the hash, it leaks a reference to the backbonegw object. This resource leak can accumula...