CVE-2026-24411

CVE-2026-24411 affects iccDEV. Versions 2.3.1.1 and earlier have Undefined Behavior in CIccTagXmlSegmentedCurve::ToXml() when user-controllable input is embedded in ICC profile data or other structured binaries, potentially enabling DoS, data manipulation, bypass of application logic, and Code Ex...

CVE-2026-24409

iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Versions 2.3.1.1 and below have Undefined Behavior and Null Pointer Deference in CIccTagXmlFloatNum::ParseXml. This occurs when user-controllable input is unsafely incorporated into...

CVE-2026-24407

CVE-2026-24407 affects iccDEV: versions

EUVD-2026-4610

iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. In versions 2.3.1.1 and below, CIccXmlArrayType contains a Null Pointer Dereference and Undefined Behavior vulnerability. This occurs when user-controllable input is unsafely...

PT-2026-4560

Name of the Vulnerable Software and Affected Versions iccDEV versions 2.3.1.1 and below Description iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Versions 2.3.1.1 and below contain Undefined Behavior in the...

PT-2026-4561

iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Versions 2.3.1.1 and below have aHeap Buffer Overflow vulnerability in the CIccTagXmlSegmentedCurve::ToXml function. This occurs when user-controllable input is unsafely incorporate...

CVE-2026-1363

creationtimestamp| type| source ---|---|--- 2026-01-23 08:03:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10653-117a1-2.html 2026-01-23 10:10:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md3hibvyrj2g 2026-01-23 11:35:10+00:00| seen|...

ICE Agents Are ‘Doxing’ Themselves

The alleged risks of being publicly identified have not stopped DHS and ICE employees from creating profiles on LinkedIn, even as Kristi Noem threatens to treat revealing agents’ identities as a crime...

CVE-2021-47817 OpenEMR 5.0.2.1 - Remote Code Execution

OpenEMR 5.0.2.1 contains a cross-site scripting vulnerability in user profile parameters that authenticated attackers can chain with a file upload to achieve remote code execution. Attackers can exploit the vulnerability by crafting a malicious payload to download and execute a web shell, enablin...

CVE-2021-47817

OpenEMR 5.0.2.1 has a cross-site scripting vulnerability that allows authenticated attackers to inject JavaScript via user profile parameters. The underlying issue enables an attacker to craft a payload to download and run a web shell, leading to remote command execution on the vulnerable OpenEMR...

CVE-2025-13878

creationtimestamp| type| source ---|---|--- 2026-01-21 15:16:50+00:00| seen| https://seclists.org/oss-sec/2026/q1/98 2026-01-21 16:00:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcx25u4j6j24 2026-01-21 16:39:17+00:00| seen|...

CVE-2026-24016

creationtimestamp| type| source ---|---|--- 2026-01-21 08:25:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcwaortztj2m 2026-01-21 09:43:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcwf2qm4zk2h...

ManageIQ input validation error vulnerability

ManageIQ is an open-source web management platform developed by ManageIQ. Previous versions of ManageIQ such as ManageIQ radjabov-2 had a vulnerability related to input validation errors. This vulnerability stemmed from the ability to create TimeProfiles with incorrect formats, which could lead t...

CVE-2025-53912

creationtimestamp| type| source ---|---|--- 2026-01-20 16:10:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcuk75iw7w2c 2026-01-20 16:30:51+00:00| seen| https://infosec.place/objects/7a4b9871-e1dc-42aa-96f2-7d71c4fb4863 2026-01-20 17:12:04+00:00| seen|...

CVE-2025-14798 LearnPress – WordPress LMS Plugin <= 4.3.2.4 - Missing Authorization to Unauthenticated Sensitive User Information Disclosure via REST API

The LearnPress – WordPress LMS Plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.3.2.4 via the getitempermissionscheck function. This makes it possible for unauthenticated attackers to extract sensitive data including user first names and las...

CVE-2025-14798

The LearnPress – WordPress LMS Plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.3.2.4 via the getitempermissionscheck function. This makes it possible for unauthenticated attackers to extract sensitive data including user first names and las...

PT-2026-3534

The LearnPress – WordPress LMS Plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.3.2.4 via the get item permissions check function. This makes it possible for unauthenticated attackers to extract sensitive data including user first names and...

CERTFR-2026-ACT-002

creationtimestamp| type| source ---|---|--- 2026-01-19 13:47:14+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mcrrqv3oq52n 2026-01-19 13:47:18+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/115922071296350254 2026-01-19 15:35:49+00:00| seen|...

CVE-2026-1139

creationtimestamp| type| source ---|---|--- 2026-01-19 06:03:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcqxtl5vjg2i 2026-01-19 07:09:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcr3ixplwd27...

CVE-2025-14231

creationtimestamp| type| source ---|---|--- 2026-01-16 01:01:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcivl2dl3t2m 2026-01-16 01:41:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcixsunlnr2m 2026-01-20 21:24:40+00:00| seen|...