40295 matches found
CVE-2026-41950
creationtimestamp| type| source ---|---|--- 2026-05-06 01:21:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5jyljkm52e 2026-07-13 13:00:07+00:00| seen| https://t.me/truesecator/8341 2026-07-14 00:00:44+00:00| seen| https://t.me/truesecator/8341...
CVE-2026-39852
creationtimestamp| type| source ---|---|--- 2026-05-06 01:19:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5jug4xzc2p 2026-08-05 16:42:33+00:00| seen| https://bsky.app/profile/endoflife.ai/post/3msdxuocqot2p...
PT-2026-38300
Name of the Vulnerable Software and Affected Versions Lemur versions prior to 1.9.0 Description The LDAP authentication module lemur/auth/ldap.py constructs LDAP search filters using unsanitized user input via Python string interpolation. An authenticated LDAP user can inject LDAP filter...
CVE-2026-34473
Unauthenticated DoS in ZTE H8102E, H168N, H167A, H199A, H288A, H198A, H267A, H267N, H268A, H388X, H196A, H369A, H268N, H208N, H367N, H181A, and H196Q. A denial-of-service condition can be triggered against the router's web interface by sending an oversized application/x-www-form-urlencoded POST...
PT-2026-38283
Name of the Vulnerable Software and Affected Versions Grav form plugin versions prior to 9.1.0 Description An unauthenticated page-content overwrite exists via file upload. The file upload handler in user/plugins/form/classes/Form.php uses a filename parameter that can be controlled via POST...
PT-2026-37514
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the io uring/zcrx component where closing a queue does not guarantee the immediate termination of all associated page pools. The system incorrectly releases the zcrx...
ZTE多款产品 资源管理错误漏洞
ZTE H196Q is a product of China's ZTE Corporation. The ZTE H196Q is a network device. The ZTE H168N is a router. The ZTE H388X is a modem. Several ZTE products have a resource management vulnerability; this vulnerability arises from sending overly large POST request bodies in the...
CVE-2026-34473
CVE-2026-34473: Unauthenticated DoS affecting ZTE router models including H8102E, H168N, H167A, H199A, H288A, H198A, H267A, H267N, H268A, H388X, H196A, H369A, H268N, H208N, H367N, H181A, and H196Q. According to connected documents, an oversized application/x-www-form-urlencoded POST body can trig...
PT-2026-38217
Name of the Vulnerable Software and Affected Versions ZTE H8102E affected versions not specified ZTE H168N affected versions not specified ZTE H167A affected versions not specified ZTE H199A affected versions not specified ZTE H288A affected versions not specified ZTE H198A affected versions not...
PT-2026-37354
A remote code execution vulnerability exists in Notification Settings on GeoVision GV-ASWeb 6.2.0. An authenticated user with System Setting permissions can execute arbitrary commands on the server by sending a crafted HTTP POST request to the ASWebCommon.srf backend endpoint to bypass the fronte...
CVE-2026-34473
Unauthenticated DoS in ZTE H8102E, H168N, H167A, H199A, H288A, H198A, H267A, H267N, H268A, H388X, H196A, H369A, H268N, H208N, H367N, H181A, and H196Q. A denial-of-service condition can be triggered against the router's web interface by sending an oversized application/x-www-form-urlencoded POST...
Linux Distros Unpatched Vulnerability : CVE-2026-7412
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, the Operation Delegation feature fails to validate the destination URI of delegated...
CVE-2026-7857
creationtimestamp| type| source ---|---|--- 2026-05-05 22:01:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml56snv3fo2h...
GHSA-WP38-WHX3-XFFH AVideo has Blind SSRF in YPTWallet Donation Webhook via Missing isSSRFSafeURL() Check and CURLOPT_FOLLOWLOCATION Redirect Bypass
Summary An authenticated user can configure their own donation-notification webhook URL to point at internal/loopback/metadata hosts e.g. http://127.0.0.1:8080/..., http://169.254.169.254/latest/..., RFC1918 addresses. When any other user including a second account owned by the same attacker...
AVideo has Blind SSRF in YPTWallet Donation Webhook via Missing isSSRFSafeURL() Check and CURLOPT_FOLLOWLOCATION Redirect Bypass
Summary An authenticated user can configure their own donation-notification webhook URL to point at internal/loopback/metadata hosts e.g. http://127.0.0.1:8080/..., http://169.254.169.254/latest/..., RFC1918 addresses. When any other user including a second account owned by the same attacker...
CVE-2026-35453
creationtimestamp| type| source ---|---|--- 2026-05-05 21:34:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml55bhnfo42e...
EUVD-2026-27430
A security vulnerability has been detected in D-Link DI-8100 16.07.26A1. Affected by this vulnerability is the function urlruleasp of the file /urlrule.asp of the component POST Parameter Handler. Such manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploi...
CVE-2025-70067
creationtimestamp| type| source ---|---|--- 2026-05-05 21:22:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml54lzltxc2s...
CVE-2026-36365
creationtimestamp| type| source ---|---|--- 2026-05-05 21:00:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml53ep5r6g2n...
CVE-2026-34459
creationtimestamp| type| source ---|---|--- 2026-05-05 20:54:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml52zvt5hk2i 2026-05-06 05:36:40+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-sandboxie-per-windows...