PT-2026-23119

Name of the Vulnerable Software and Affected Versions Next.js versions 10.0.0 through 16.1.6 Description Next.js, a React framework for building full-stack web applications, had an issue where the default image optimization disk cache / next/image lacked a configurable upper bound, leading to...

PT-2026-22505

Name of the Vulnerable Software and Affected Versions Tenda F453 version 1.0.0.3 Description A buffer overflow issue exists in the fromGstDhcpSetSer function within the httpd component of Tenda F453 routers. The issue is triggered by manipulating the dips argument. This allows for remote attacks....

PT-2026-21454

Name of the Vulnerable Software and Affected Versions D-Link DWR-M960 version 1.01.07 Description A flaw exists in the D-Link DWR-M960 that allows for a stack-based buffer overflow. This issue is located within the sub 460F30 function of the /boafrm/formDateReboot file, part of the Scheduled Rebo...

PT-2026-21295

Name of the Vulnerable Software and Affected Versions D-Link DWR-M960 version 1.01.07 Description A security flaw exists in D-Link DWR-M960. The issue is a stack-based buffer overflow in the function sub 469104 of the file /boafrm/formIpv6Setup. The vulnerability is triggered by manipulating the...

PT-2026-8305

Name of the Vulnerable Software and Affected Versions Intelbras VIP 3260 Z IA version 2.840.00IB005.0.T Description A security flaw exists in Intelbras VIP 3260 Z IA, impacting an unknown functionality within the /OutsideCmd file. This flaw allows for weak password recovery and remote attack...

PT-2026-3417

Name of the Vulnerable Software and Affected Versions Totolink LR350 version 9.3.5u.6369 B20220309 Description A security flaw exists in Totolink LR350. The issue affects the setWizardCfg function within the /cgi-bin/cstecgi.cgi file, specifically in the POST Request Handler component. Manipulati...

PT-2026-3391

Name of the Vulnerable Software and Affected Versions UTT 进取 520W version 1.7.7-180627 Description A buffer overflow issue exists in the strcpy function within the /goform/ConfigExceptAli file of UTT 进取 520W version 1.7.7-180627. This allows for remote exploitation of the system. The vendor was...

Towards Understanding and Characterizing Vulnerabilities in Intelligent Connected Vehicles through Real-World Exploits

Intelligent Connected Vehicles ICVs are a core component of modern transportation systems, and their security is crucial as it directly relates to user safety. Despite prior research, most existing studies focus only on specific sub-components of ICVs due to their inherent complexity. As a result...

CVE-2025-4378

creationtimestamp| type| source ---|---|--- 2025-06-24 16:47:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19376 2025-06-24 20:34:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsex2vgzmz2k...

CVE-2024-51636

creationtimestamp| type| source ---|---|--- 2024-11-19 19:07:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113511186609832791...

CVE-2024-50552

creationtimestamp| type| source ---|---|--- 2024-11-19 18:37:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113511068489681032...

CVE-2024-9426

creationtimestamp| type| source ---|---|--- 2024-11-13 04:07:09+00:00| seen| https://t.me/cvedetector/10764 2024-11-13 04:07:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113473672698119261...

CVE-2024-40851

creationtimestamp| type| source ---|---|--- 2024-10-28 21:09:09+00:00| seen| None...

CVE-2023-39331

A previously disclosed vulnerability CVE-2023-30584 was patched insufficiently. The new path traversal vulnerability arises because the implementation does not protect itself against the application overwriting built-in utility functions with user-defined implementations...

CVE-2022-28589

A stored cross-site scripting XSS vulnerability in Pixelimity 1.0 allows attackers to execute arbitrary web scripts or HTML via the Title field in admin/pages.php?action=addnew...

CVE-2021-26221

The ezxmlnew function in ezXML 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exhausting the memory pool...

Rust Security Vulnerabilities

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. arr crate through 2020-08-25 for Rust A security vulnerability exists that stems from uninitialized memory being deleted from the template by Array::new...

Faraday v3.5 - Collaborative Penetration Test and Vulnerability Management Platform

Here’s the main new features and improvements in Faraday v3.5: New vulnerability form We are happy to introduce our new vulnerability form which makes the creation and editing of vulnerabilities easier. The new form brings you tabs to make it smaller and group different fields. Custom fields Add...

Google Chrome Goes Down in Early Stage of Pwn2Own

VANCOUVER–A group of researchers from VUPEN, a French security firm, was able to compromise Google Chrome in the initial stages of the Pwn2Own contest. But because of the new rules this year, that doesn’t guarantee them a win in the contest. Rather, it just gives them a nice head start. The...