91162 matches found
CVE-2026-81640: Use of Hard-coded Credentials
An attacker could derive the camera's Wi-Fi password and connect to its wireless network. This weakens or eliminates the security value of the access-point password and may expose the live video stream, device services, status interfaces, and firmware-update functionality...
CVE-2026-78482: Improper Neutralization of Special Elements used in an SQL Command
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit...
CVE-2026-49309: Undefined Security Weakness
Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2026-49313: Undefined Security Weakness
Permission control vulnerability in the app lock module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2026-87034: Improper Neutralization of Special Elements used in an SQL Command
Tanium addressed a SQL injection vulnerability in Comply...
CVE-2026-87088: Improper Neutralization of Special Elements used in an OS Command
Tanium addressed an unauthorized code execution vulnerability in Enforce...
CVE-2026-87030: Improper Limitation of a Pathname to a Restricted Directory
Tanium addressed a path traversal vulnerability in Comply...
CVE-2026-79617: Incorrect Permission Assignment for Critical Resource
Incorrect Permission Assignment for Critical Resource vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus LightDM Greeter allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pardus LightDM Greeter: before 0.4.15...
CVE-2026-87037: Missing Authorization
Tanium addressed an improper access controls vulnerability in Comply...
CVE-2026-77974: Missing Authentication for Critical Function
After spoofing the device and obtaining one user confirmation, an attacker may be able to cause the application to transmit firmware through an unauthenticated and unsigned update channel...
CVE-2026-87023: Improper Limitation of a Pathname to a Restricted Directory
Tanium addressed a path traversal vulnerability in Comply...
CVE-2026-82563: Authentication Bypass by Spoofing
An attacker could impersonate the camera and place themselves in a man-in-the-middle or device-emulation position. This permits manipulation of device status responses, observation of application requests, and potential triggering of firmware-update behavior...
CVE-2026-12855: Improper Input Validation
Unvalidated memory boundary could result in arbitrary code execution. The vulnerability exists in the code developed specifically for HP projects...
SkillSpector v2.11.1
SkillSpector Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks before installing agent skills. Overview AI agent skills used by Claude Code, Codex CLI, Gemini CLI, etc. execute with implicit trust and minimal vetting. In the 31,132-skill analyzed...
CVE-1999-0512
creationtimestamp| type| source ---|---|--- 2026-09-08 06:48:06+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/smtp/smtprelay.rb...
exploitwatch-web
EXPLOITWATCH WEB — Student Lab Edition 1. Mục tiêu Exploit...
CVE-2026-33391: Incorrect Authorization
An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient validation of user privileges. An authenticated user with limited privileges can remotely bypass the intended access control of the web management interface and modify the Smart...
CVE-2026-69806: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally...