23352 matches found
MINI-W9X6-MG2P-9R8C
Bulletin has no description...
MINI-FFCM-QX23-9736
Bulletin has no description...
CVE-2026-71438
creationtimestamp| type| source ---|---|--- 2026-08-06 20:32:06+00:00| seen| https://gist.github.com/alon710/1523a448808a9bd39531599fad70a2e8...
CVE-2026-65547
Subscriber SQL Injection in Creative Mail = 1.6.9 versions...
CVE-2026-18427
creationtimestamp| type| source ---|---|--- 2026-08-06 14:59:17+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3msgckuh2w226 2026-08-06 20:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgtfyoa4h2n...
EUVD-2026-53988
Unauthenticated Bypass Vulnerability in Login with phone number = 1.8.70 versions...
CVE-2026-65570
Unauthenticated Bypass Vulnerability in Login with phone number = 1.8.70 versions...
CVE-2026-65570 WordPress Login with phone number plugin <= 1.8.70 - Bypass vulnerability vulnerability
Unauthenticated Bypass Vulnerability in Login with phone number = 1.8.70 versions...
WordPress Login with phone number plugin <= 1.8.70 - Bypass vulnerability vulnerability
Bypass vulnerability vulnerability discovered by she11f in WordPress Plugin Login with phone number versions = 1.8.70...
WordPress Authora : Easy login with mobile number plugin < 1.7.7 - Easy Login with Mobile Number < 1.7.7 - Unauthenticated Account Takeover vulnerability
WordPress Authora : Easy login with mobile number plugin 1.7.7 - Easy Login with Mobile Number 1.7.7 - Unauthenticated Account Takeover vulnerability discovered by 0xBassia in WordPress Plugin Authora : Easy login with mobile number versions 1.7.7...
CVE-2026-12713
The WPCargo Track & Trace WordPress plugin versions before 8.0.4 is vulnerable to an unauthenticated SQL injection due to improper sanitization and escaping of a parameter used in a SQL statement. Specifically, the vulnerability exists in the wpcargo_tracking_number functionality. This flaw allow...
CVE-2026-12713 WPCargo Track & Trace < 8.0.4 - Unauthenticated SQL Injection via wpcargo_tracking_number
The WPCargo Track & Trace WordPress plugin before 8.0.4 does not properly sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks. This affects a code path distinct from the one addressed by CVE-2024-44004...
SUSE CVE-2026-18401
The non-blocking asynchronous JSON parser in jackson-core does not enforce the maxNumberLength constraint defined in StreamReadConstraints default: 1000 characters. An attacker able to submit JSON to an application that uses the async parser API can supply a number token of arbitrary length,...
EulerOS 2.0 SP15 : shim (EulerOS-SA-2026-2951)
According to the versions of the shim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: When a delta CRL that contains a Delta CRL Indicator extensionx000D is processed a NULL pointer dereference might happen if the...
CVE-2026-8470
IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 use Python's non-cryptographic random module for generating Fernet encryption keys from user secrets under 32 characters. The deterministic Mersenne Twister PRNG produces identical keys for...
CGA-FM5W-93VC-V533
Bulletin has no description...
CVE-2026-20200
creationtimestamp| type| source ---|---|--- 2026-08-05 17:00:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96776 2026-08-06 00:00:33+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96776 2026-08-06 10:50:29+00:00| seen|...
MINI-27P7-34MC-MW35
Bulletin has no description...
CVE-2026-71264
WLED's GET /json/cfg endpoint registered in wled00/wledserver.cpp calls serveJson with no settings-PIN check, unlike the /edit endpoint which explicitly checks correctPIN, disclosing the device's general configuration network, hardware, LED setup to any unauthenticated client on the network...