EUVD-2026-4143

SmarterTools SmarterMail versions prior to build 9511 contain an authentication bypass vulnerability in the password reset API. The force-reset-password endpoint permits anonymous requests and fails to verify the existing password or a reset token when resetting system administrator accounts. An...

EUVD-2026-4158

Authorization Bypass Through User-Controlled Key vulnerability in Solvera Software Services Trade Inc. Teknoera allows Exploitation of Trusted Identifiers.This issue affects Teknoera: through 01102025...

RHSA-2026:0935

creationtimestamp| type| source ---|---|--- 2026-01-22 08:58:18+00:00| seen| https://gist.github.com/Darkcrai86/c86d37dd69863dff2516741f9c8f1210...

EUVD-2026-4171

pytest through 9.0.2 on UNIX relies on directories with the /tmp/pytest-of-user name pattern, which allows local users to cause a denial of service or possibly gain privileges...

CVE-2026-23526

creationtimestamp| type| source ---|---|--- 2026-01-22 01:12:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcxyy5gbk52t...

PT-2026-4625

CVE-2024-45743 - Apache HTTP Server Cross-Site Scripting CVE ID : CVE-2024-45743 Published : Jan. 22, 2026, 10:16 a.m. | 50 minutes ago Description : Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. Severity: 0.0 | NA Visit the link for more details, such as CVSS...

PT-2026-4630

CVE-2024-53252 - Apache HTTP Server Remote Code Execution CVE ID : CVE-2024-53252 Published : Jan. 22, 2026, 10:16 a.m. | 50 minutes ago Description : Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. Severity: 0.0 | NA Visit the link for more details, such as CVSS...

CVE-2025-69052: Missing Authorization

Missing Authorization vulnerability in FmeAddons Registration & Login with Mobile Phone Number for WooCommerce registration-login-with-mobile-phone-number allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Registration & Login with Mobile Phone Number for...

WordPress plugin: Registration & Login using mobile phone number for WooCommerce – security vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be added to a...

PT-2026-4626

CVE-2024-53248 - Apache Struts Command Injection CVE ID : CVE-2024-53248 Published : Jan. 22, 2026, 10:16 a.m. | 50 minutes ago Description : Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. Severity: 0.0 | NA Visit the link for more details, such as CVSS details,...

Azure Linux 3.0 Security Update: kernel (CVE-2025-22038)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22038 advisory. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate zero numsubauth before...

Azure Linux 3.0 Security Update: kernel (CVE-2024-58007)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-58007 advisory. - In the Linux kernel, the following vulnerability has been resolved: soc: qcom: socinfo: Avoid out of bounds...

CVE-2025-41024

Stored Cross-Site Scripting XSS in Poultry Farm Management System v1.0 due to the lack of proper validation of user input by sending a POST request. The relationship between parameters and assigned identifiers is as follows: 'companyaddress', 'companyemail', 'companyname', 'country', 'mobilenumbe...

RHSA-2026:0924

creationtimestamp| type| source ---|---|--- 2026-01-21 12:18:18+00:00| seen| https://gist.github.com/Darkcrai86/72a1ea510779574affd676079a7cc6ee...

RHSA-2026:0908

creationtimestamp| type| source ---|---|--- 2026-01-21 10:51:10+00:00| seen| https://gist.github.com/Darkcrai86/bd1bd474c2a7bee86ae9d2588651e7b3...

RHSA-2026:0906

creationtimestamp| type| source ---|---|--- 2026-01-21 07:53:18+00:00| seen| https://gist.github.com/Darkcrai86/d22625358278aa9543ecc488050096ec...

RHSA-2026:0905

creationtimestamp| type| source ---|---|--- 2026-01-21 07:52:54+00:00| seen| https://gist.github.com/Darkcrai86/255298d5dcfb1953fdea37366b890c55...

Konica Bizhub Multifunction Printers Insertion of Sensitive Information into Externally-Accessible File or Directory (CVE-2024-51977)

An unauthenticated attacker who can access either the HTTP service TCP port 80, the HTTPS service TCP port 443, or the IPP service TCP port 631, can leak several pieces of sensitive information from a vulnerable device. The URI path /etc/mntinfo.csv can be accessed via a GET request and no...

CVE-2026-21983

...

CVE-2026-21965

Oracle MySQL CVE-2026-21965 affects MySQL Server 9.0.0–9.5.0 (Server: Pluggable Auth). The vulnerability allows a high-privilege attacker with network access to cause a partial denial of service. Attack surface involves multiple protocols; base CVSS 3.1 score is 2.7 (LOW) with Availability impact...