40046 matches found
CVE-2026-9297
A security vulnerability has been detected in Edimax BR-6428NS 1.10. Affected is the function formWlbasic of the file /goform/formWlbasic of the component POST Request Handler. The manipulation of the argument repeaterSSID leads to command injection. The attack may be initiated remotely. The...
CVE-2026-9296
A weakness has been identified in Edimax BR-6428NS 1.10. This impacts the function system of the file /goform/formWlanM of the component POST Request Handler. Executing a manipulation of the argument...
CVE-2026-9403
A vulnerability was determined in Edimax BR-6675nD 1.12. The impacted element is the function formWlSiteSurvey of the file /goform/formWlSiteSurvey of the component POST Request Handler. This manipulation of the argument selSSID causes buffer overflow. The attack may be initiated remotely. The...
CVE-2026-33137
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki Platform is a generic wiki platform. In versions starting with 15.10.6 and prior to 18.1.0-rc-1, 17.10.3, 17.4.9, and 16.10.17, the POST /wikis/wikiName API executes a XAR import without...
CVE-2026-44669
creationtimestamp| type| source ---|---|--- 2026-05-26 19:53:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrrg2uh7r2c...
CVE-2026-41164
creationtimestamp| type| source ---|---|--- 2026-05-26 19:38:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrql7eita2i...
CVE-2026-44749
creationtimestamp| type| source ---|---|--- 2026-05-26 19:15:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrpdj6rih2v...
CVE-2026-44775
creationtimestamp| type| source ---|---|--- 2026-05-26 19:08:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrowzbcq62e...
CVE-2026-24193
creationtimestamp| type| source ---|---|--- 2026-05-26 19:05:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmroq2gwf32t...
CVE-2026-8856
creationtimestamp| type| source ---|---|--- 2026-05-26 19:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmroikayjn2t...
CVE-2026-48686
creationtimestamp| type| source ---|---|--- 2026-05-26 19:00:46+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mmroihdyss2w 2026-06-22 04:46:47+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mou3eaz2fv2b...
CVE-2026-8855
creationtimestamp| type| source ---|---|--- 2026-05-26 19:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmroidmxkf2l 2026-05-26 21:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmrvke7acb25 2026-06-22 00:20:20+00:00| seen|...
GHSA-QRVH-R3F2-9H4R XWiki Platform has an Unauthenticated XAR Import via REST /wikis/{wikiName}
Impact POST /wikis/wikiName executes a XAR import without performing any authentication or authorization checks, allowing an unauthenticated attacker to create or update documents in the target wiki Patches This vulnerability has been patched in XWiki 16.10.17, 17.4.9, 17.10.3, 18.0.1 and...
CVE-2026-4051 IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to Server Post-Auth Remote Code Execution
IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an attacker with administrative privileges to execute remote code due to exposed method that is not properly restricted...
CVE-2026-4051 IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to Server Post-Auth Remote Code Execution
IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an attacker with administrative privileges to execute remote code due to exposed method that is not properly restricted...
CVE-2026-4051
CVE-2026-4051 concerns IBM Engineering Lifecycle Management - Jazz Foundation. Affected products/versions: 7.0.3 (through iFix021), 7.1.0 (through iFix009), 7.2.0 (through iFix001). Root cause: an exposed method that is not properly restricted, enabling a user with administrative privileges to pe...
WordPress Post Categories Gallery plugin <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Gilang - DJ in WordPress Plugin Post Categories Gallery versions = 1.0.0...
WordPress GNTT Post Title Ticker plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by MAJidox in WordPress Plugin GNTT Post Title Ticker versions = 1.0...