40889 matches found
CVE-2026-4248
creationtimestamp| type| source ---|---|--- 2026-03-27 23:19:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi3ax4le4w2p 2026-03-28 01:18:50+00:00| seen| Telegram/DQ8Phmkx05Q1rHpnB8sJ1vhC9dSxcFzzTf0RtJAOAn3w7JQ 2026-03-28 02:24:52+00:00| seen|...
CVE-2026-4248
The Ultimate Member plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.11.2. This is due to the 'usermeta:passwordresetlink' template tag being processed within post content via the 'umloggedin' shortcode, which generates a valid password...
CVE-2026-30689
creationtimestamp| type| source ---|---|--- 2026-03-27 23:16:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi3as3cro52t...
CVE-2026-30637
creationtimestamp| type| source ---|---|--- 2026-03-27 23:16:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi3aruluvu27...
CVE-2026-30304
creationtimestamp| type| source ---|---|--- 2026-03-27 23:05:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi3a7nphoq2r 2026-04-19 04:06:47+00:00| seen| https://bsky.app/profile/breachandbuild.bsky.social/post/3mjt3bsqh2y2q...
CVE-2025-59368
creationtimestamp| type| source ---|---|--- 2026-03-27 23:00:04+00:00| seen| https://bsky.app/profile/hackmag.com/post/3mi37v3gh6d2y...
CVE-2026-4902
A vulnerability was detected in Tenda AC5 15.03.06.47. This affects the function fromAddressNat of the file /goform/addressNat of the component POST Request Handler. The manipulation of the argument page results in stack-based buffer overflow. The attack can be launched remotely. The exploit is n...
CVE-2026-4903
A flaw has been found in Tenda AC5 15.03.06.47. This vulnerability affects the function formQuickIndex of the file /goform/QuickIndex of the component POST Request Handler. This manipulation of the argument PPPOEPassword causes stack-based buffer overflow. The attack may be initiated remotely. Th...
penetration-testing-reports
penetration-testing-reports A collection of penetration testin...
CVE-2026-33906
creationtimestamp| type| source ---|---|--- 2026-03-27 22:27:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi362tzp3q2s 2026-03-27 23:28:03+00:00| seen| Telegram/EI25wC4yN3TaatXDJQ6U03Lar3nhYMfqPNXio5Iaw2cNO8...
CVE-2026-4248
The Ultimate Member plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.11.2. This is due to the 'usermeta:passwordresetlink' template tag being processed within post content via the 'umloggedin' shortcode, which generates a valid password...
CVE-2026-4990
creationtimestamp| type| source ---|---|--- 2026-03-27 22:20:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi35ofau4g24...
CVE-2026-4988
creationtimestamp| type| source ---|---|--- 2026-03-27 22:11:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi356h5ptw2z...
CVE-2026-33954
creationtimestamp| type| source ---|---|--- 2026-03-27 22:10:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi353nq2bp2d...
EUVD-2026-16811
A vulnerability has been found in Tenda AC15 15.03.05.19. This affects the function formSetCfm of the file /goform/setcfm of the component POST Request Handler. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has...
CVE-2026-4974
A flaw has been found in Tenda AC7 15.03.06.44. Affected by this issue is the function fromSetSysTime of the file /goform/SetSysTimeCfg of the component POST Request Handler. Executing a manipulation of the argument Time can lead to stack-based buffer overflow. It is possible to launch the attack...
CVE-2026-4974 Tenda AC7 POST Request SetSysTimeCfg fromSetSysTime memory corruption
A flaw has been found in Tenda AC7 15.03.06.44. Affected by this issue is the function fromSetSysTime of the file /goform/SetSysTimeCfg of the component POST Request Handler. Executing a manipulation of the argument Time can lead to stack-based buffer overflow. It is possible to launch the attack...
CVE-2026-4974
CVE-2026-4974 affects Tenda AC7 firmware version 15.03.06.44. The vulnerability is in the function fromSetSysTime of /goform/SetSysTimeCfg in the POST Request Handler, where manipulating the Time argument can cause a stack-based buffer overflow. This enables remote code execution over the network...
CVE-2026-33765
Summary: Pi-hole Admin Interface (web) prior to 6.0 contains a critical OS command injection in savesettings.php. The vulnerability arises from unsanitized user-controlled $_POST['webtheme'] being concatenated into a system command executed via PHP’s exec(), with the command running under sudo pr...