40303 matches found
CVE-2026-7782
creationtimestamp| type| source ---|---|--- 2026-05-05 02:57:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml36vb2ozt2k...
CVE-2026-7781
creationtimestamp| type| source ---|---|--- 2026-05-05 02:42:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml362fquus2i...
CVE-2026-7718
A vulnerability was identified in Totolink WA300 5.2cu.7112B20190227. Impacted is the function setWebWlanIdx of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument webWlanIdx leads to command injection. The attack may be initiated remotely. The...
CVE-2026-40197
creationtimestamp| type| source ---|---|--- 2026-05-05 01:30:20+00:00| seen| https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3ml2zynvoipa2...
CVE-2026-43870
creationtimestamp| type| source ---|---|--- 2026-05-05 00:43:56+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ml2xfsewtz22 2026-05-05 10:49:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml3zb4z75s2t...
CVE-2026-43868
creationtimestamp| type| source ---|---|--- 2026-05-05 00:38:55+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ml2x4tl2hn2e 2026-05-05 11:09:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml42dpaud62p...
IOBit IObit Advanced SystemCare 后置链接漏洞
IOBit Advanced SystemCare is a system management utility developed by IOBit Corporation. This program is primarily used for scanning, repairing, and optimizing systems. Version 19 of IOBit Advanced SystemCare contained a post-installation vulnerability, which was caused by a issue with the Servic...
Gotenberg 代码问题漏洞
Gotenberg is an open-source, developer-friendly API developed by Gotenberg. It is used to convert various document formats into PDF files. Version 8.29.1 of Gotenberg contains a code vulnerability. This vulnerability stems from the FilterDeadline function, which returns nil unconditionally when...
PT-2026-37295
Name of the Vulnerable Software and Affected Versions WWBN AVideo versions prior to 29.0 Description An authenticated user can configure a donation-notification webhook URL to point to internal, loopback, or metadata hosts, such as http://127.0.0.1:8080/ or http://169.254.169.254/latest/. When...
Eclipse BaSyx Java Server SDK 代码问题漏洞
Eclipse BaSyx Java Server SDK is an industrial digitalization development toolkit from the Eclipse Foundation. Versions of Eclipse BaSyx Java Server SDK prior to 2.0.0-milestone-10 contained code vulnerabilities. These vulnerabilities stemmed from the Operation Delegation feature not verifying th...
PT-2026-36954
The Schedule Post Changes With PublishPress Future plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wrapper' attribute of the futureaction shortcode in all versions up to, and including, 4.10.0. This is due to insufficient input sanitization on the wrapper attribute. The...
FacturaScripts 安全漏洞
FacturaScripts is an open-source ERP software developed by Carlos Garcia, a Spanish developer. Versions of FacturaScripts prior to 2025.92 contained security vulnerabilities. These vulnerabilities stemmed from the lack of validation of the nick parameter in the POST request of the EditUser...
PT-2026-36982
Name of the Vulnerable Software and Affected Versions PaperCut MF affected versions not specified Description A race condition occurs when processing badge-swipe data from specific HP multifunction devices. Under certain network conditions involving dropped packets and out-of-order sequence...
PT-2026-37090
Name of the Vulnerable Software and Affected Versions OpenStack Horizon versions 25.6 through 25.7.2 OpenStack Horizon versions 25.7 through 25.7.2 Description A write operation occurs in the session storage backend before authentication, allowing unauthenticated requests to exhaust the storage...
PT-2026-36979
Name of the Vulnerable Software and Affected Versions GenerateBlocks versions prior to 2.2.1 Description The plugin is subject to Insecure Direct Object Reference IDOR, a flaw where an application provides direct access to objects based on user-supplied input. The issue exists in the...
CVE-2026-42221
creationtimestamp| type| source ---|---|--- 2026-05-04 21:35:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2mueqssi2e 2026-05-04 22:32:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2q2ndiwr2i 2026-05-06 18:07:08+00:00| seen|...
CVE-2026-42222
Nginx UI is a web user interface for the Nginx web server. In version 2.3.5, an unauthenticated bootstrap takeover exists in nginx-ui during the initial installation window exposed by POST /api/install. At time of publication no public patches are available...
CVE-2026-41926
creationtimestamp| type| source ---|---|--- 2026-05-04 21:01:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2kyfnef32k 2026-05-05 01:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116519379011969410 2026-05-05 01:30:28+00:00| seen|...
CVE-2026-42236
creationtimestamp| type| source ---|---|--- 2026-05-04 20:56:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2kph5rca2h 2026-05-13 18:30:06+00:00| seen| https://t.me/truesecator/8200...