CVE-2025-15484

creationtimestamp| type| source ---|---|--- 2026-04-01 08:21:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3migb4fqpml2d 2026-04-01 14:51:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3migwwfbs252t 2026-04-01 15:20:57+00:00| seen|...

CVE-2026-5257

creationtimestamp| type| source ---|---|--- 2026-04-01 07:15:40+00:00| published-proof-of-concept| Telegram/PyNQtULQpgHoLf2PKswMvEDbaboZwTfs0uqYxCbwNT3ZRI 2026-04-01 09:00:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3migdcvopxx25 2026-04-04 23:40:08+00:00| seen|...

CVE-2026-5256

creationtimestamp| type| source ---|---|--- 2026-04-01 07:15:40+00:00| published-proof-of-concept| Telegram/PyNQtULQpgHoLf2PKswMvEDbaboZwTfs0uqYxCbwNT3ZRI 2026-04-01 08:55:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3migczx2i6y2i 2026-04-04 05:00:15+00:00| seen|...

CVE-2026-5156

A vulnerability was determined in Tenda CH22 1.0.0.1. This impacts the function formQuickIndex of the file /goform/QuickIndex of the component Parameter Handler. This manipulation of the argument mitlinktype causes stack-based buffer overflow. The attack is possible to be carried out remotely. Th...

EUVD-2026-17761

The application's installer runs with elevated privileges but resolves system executables and DLLs using untrusted search paths that can include user-writable directories, allowing a local attacker to place malicious binaries with the same names and have them loaded or executed instead of the...

CVE-2026-4947

creationtimestamp| type| source ---|---|--- 2026-04-01 03:18:36+00:00| seen| Telegram/jyatwHTsuiD0gHBEYEMrZjBra-amFrxPGWmF0zTmxDIL8I 2026-04-01 05:16:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifwqza4sr27...

CVE-2026-35037

creationtimestamp| type| source ---|---|--- 2026-04-01 03:18:31+00:00| published-proof-of-concept| https://github.com/lin-snow/Ech0/security/advisories/GHSA-cqgf-f4x7-g6wc 2026-04-06 18:21:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mituyphtjk22 2026-04-06 19:29:09+00:00| see...

CVE-2026-35036

creationtimestamp| type| source ---|---|--- 2026-04-01 03:18:22+00:00| published-proof-of-concept| https://github.com/lin-snow/Ech0/security/advisories/GHSA-wc4h-2348-jc3p 2026-04-06 17:19:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mitriwnmtc2w 2026-04-06...

CVE-2026-3780

The application's installer runs with elevated privileges but resolves system executables and DLLs using untrusted search paths that can include user-writable directories, allowing a local attacker to place malicious binaries with the same names and have them loaded or executed instead of the...

CVE-2026-34547

creationtimestamp| type| source ---|---|--- 2026-04-01 02:09:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifmdyrvnp24...

CVE-2026-34554

creationtimestamp| type| source ---|---|--- 2026-04-01 02:07:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifmafyw4l2z...

CVE-2026-34549

creationtimestamp| type| source ---|---|--- 2026-04-01 02:05:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifm52eyga22...

EUVD-2026-17688

A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Impacted is the function...

CVE-2026-30526

CVE-2026-30526 affects SourceCodester Zoo Management System v1.0. The vulnerability is located on the login page in the msg parameter, where user-supplied content is echoed back without proper HTML encoding/sanitization, enabling a reflected XSS via a crafted URL. The connected documents confirm ...

PT-2026-29614

A weakness has been identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affected by this vulnerability is the...

PT-2026-29554

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could...

D-Link多款产品 访问控制错误漏洞

D-Link DNS-120, etc., are products of D-Link Corporation, a Chinese company. The D-Link DNS-120 is a network storage adapter. The D-Link DNR-202L is a network video camera. The D-Link DNS-315L is a network attached storage device. Several D-Link products have a vulnerability related to access...

The vulnerability of the bpf_link_inc() function in the kernel/bpf/syscall.c module, which is part of the Linux operating system’s BPF interpreter support, allows a hacker to cause a service failure.

The vulnerability of the bpflinkinc function in the kernel/bpf/syscall.c module, which is part of the BPF interpreter support for Linux’s operating system, relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the q6v5_alloc_memory_region() function in the drivers/remoteproc/qcom_q6v5_mss.c module of the Linux kernel’s remote processor subsystem support driver allows a attacker to cause a service failure.

The vulnerability of the q6v5allocmemoryregion function in the drivers/remoteproc/qcomq6v5mss.c module of the Linux kernel’s remote processor subsystem support driver is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-29552

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could...