45860 matches found
CVE-2026-76957
creationtimestamp| type| source ---|---|--- 2026-09-01 00:01:22+00:00| seen| https://bsky.app/profile/slackers.it/post/3mug4jap4or2n...
CVE-2026-66046
creationtimestamp| type| source ---|---|--- 2026-09-01 00:01:22+00:00| seen| https://bsky.app/profile/slackers.it/post/3mug4jap4or2n...
CVE-2026-84187: Improper Access Control
AVideo contains a missing authentication vulnerability in plugin/Live/onpublish.php that allows unauthenticated attackers to mark arbitrary scheduled broadcasts as failed by sending crafted POST requests with schedule identifiers. Attackers can exploit the unguarded RTMP callback endpoint to modi...
PT-2026-84202
Incorrect access control in the clearDiagnosisLog function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to erase diagnosis logs via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-51742: Improper Access Control
Incorrect access control in the discoverWan function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to trigger WAN discovery logic via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-51742
Incorrect access control in the discoverWan function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to trigger WAN discovery logic via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-51741
Incorrect access control in the clearDiagnosisLog function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to erase diagnosis logs via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-51741
Incorrect access control in the clearDiagnosisLog function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to erase diagnosis logs via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-51742
Incorrect access control in the discoverWan function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to trigger WAN discovery logic via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
EUVD-2026-69410
llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote attackers to cause a denial of service std::badalloc and HTTP 500 via a negative topn value in a POST request to /rerank...
VulnCheck KEV: CVE-2026-83549
SonicWall SMA1000 Appliances contains an OS command injection vulnerability that could enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution...
EUVD-2026-69212
Incorrect access control in the clearDiagnosisLog function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to erase diagnosis logs via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-75980: Improper Neutralization of Input During Web Page Generation
The BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Heading 'id' Attribute in Post Content in all versions up to, and including, 4.8.1 due to insufficient input sanitization and output escaping. Thi...
PT-2026-84203
Incorrect access control in the discoverWan function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to trigger WAN discovery logic via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
PT-2026-84519
Name of the Vulnerable Software and Affected Versions SonicWall SMA1000 Appliances affected versions not specified Description An OS Command Injection issue exists in the SMA1000 Appliance Management Console AMC. This occurs due to improper neutralization of special elements used in an OS command...
CVE-2026-83524
creationtimestamp| type| source ---|---|--- 2026-08-31 23:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mufznlllqo23 2026-09-01 00:24:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/iqtfocswoai3k...
CVE-2026-81763
creationtimestamp| type| source ---|---|--- 2026-08-31 22:07:56+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mufw6glu4c2u...
CVE-2026-81293
creationtimestamp| type| source ---|---|--- 2026-08-31 22:07:39+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mufw5wmhxh2c...
