EUVD-2026-3429

A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles EtherNet/IP Step Limit Storm tests, the device reboots unexpectedly, causing the Link State Monitor to go down for several seconds...

EUVD-2026-3426

A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles Comprehensive grammar tests, the device reboots unexpectedly, causing the Link State Monitor to go down for several seconds...

CVE-2025-41024

Stored Cross-Site Scripting XSS in Poultry Farm Management System v1.0 due to the lack of proper validation of user input by sending a POST request. The relationship between parameters and assigned identifiers is as follows: 'companyaddress', 'companyemail', 'companyname', 'country',...

CVE-2025-41024 Stored Cross-Site Scripting in Poultry Farm Management System

Stored Cross-Site Scripting XSS in Poultry Farm Management System v1.0 due to the lack of proper validation of user input by sending a POST request. The relationship between parameters and assigned identifiers is as follows: 'companyaddress', 'companyemail', 'companyname', 'country',...

EUVD-2026-3456

The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 0.9.2.1. This is due to the 'insertuser' function not restricting the roles with which a user can register. This makes it possible for unauthenticated attackers to...

BELL-CVE-2025-29943

Bulletin has no description...

CVE-2026-1195

creationtimestamp| type| source ---|---|--- 2026-01-20 01:57:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mct2lbe6d52i...

EUVD-2026-3495

EUVD-2026-3495...

PT-2026-3550

Name of the Vulnerable Software and Affected Versions Poultry Farm Management System version 1.0 Description A stored Cross-Site Scripting XSS issue exists due to insufficient validation of user-supplied data when a POST request is made. The following parameters in the '/farm/farmprofile.php'...

EUVD-2026-3326

NULL pointer dereference in the daapreplygroups function in src/httpddaap.c in owntone-server through commit 5e6f19a newer commit after version 28.2 allows remote attackers to cause a Denial of Service...

EUVD-2026-3354

A Server-Side Template Injection SSTI vulnerability in the FreeMarker component of opensagres XDocReport v1.0.0 to v2.1.0 allows attackers to execute arbitrary code via injecting crafted template expressions...

MINI-FV46-GM49-5482

Bulletin has no description...

RHSA-2026:0743

creationtimestamp| type| source ---|---|--- 2026-01-19 17:13:03+00:00| seen| https://gist.github.com/Darkcrai86/c236da0a255cafb76ea569df0871b7c4...

RHSA-2026:0753

creationtimestamp| type| source ---|---|--- 2026-01-19 17:09:57+00:00| seen| https://gist.github.com/Darkcrai86/26090bed2127472f1b985f33fa3c88ce...

RHSA-2026:0786

creationtimestamp| type| source ---|---|--- 2026-01-19 17:07:14+00:00| seen| https://gist.github.com/Darkcrai86/db2f1083976905b46a70e2074005d2f9...

EUVD-2026-3246

HarfBuzz::Shaper versions before 0.032 for Perl contains a bundled library with a null pointer dereference vulnerability. Versions before 0.032 contain HarfBuzz 8.4.0 or earlier bundled as hbsrc.tar.gz in the source tarball, which is affected by CVE-2026-22693...

EUVD-2026-3253

EUVD-2026-3253...

WordPress Sosh Share Buttons plugin cross-site request forgery vulnerability

WordPress Sosh Share Buttons plugin is a social media sharing plugin for WordPress websites. WordPress Sosh Share Buttons plugin suffers from a cross-site request forgery vulnerability that stems from a lack of random number validation in the adminpagecontent function, no details of the...

transfig security update

1:3.2.6a-5 - Detect nan in spline control values - Fix for CVE-2025-46397...

EUVD-2026-3177

A vulnerability was identified in Yonyou KSOA 9.0. Affected is an unknown function of the file /worksheet/workmod.jsp of the component HTTP GET Parameter Handler. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available an...