781 matches found
EUVD-2026-4456
ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific fla...
CVE-2026-22463
creationtimestamp| type| source ---|---|--- 2026-01-22 17:43:15+00:00| seen| https://gist.github.com/Darkcrai86/a88e0cde08fb268e1fc15fc740109cd4...
EUVD-2026-3879
A maliciously crafted HTML payload, stored in a component’s description and clicked by a user, can trigger a Stored Cross-site Scripting XSS vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in...
EUVD-2026-3983
Missing Authorization vulnerability in Ninja Team GDPR CCPA Compliance Support ninja-gdpr-compliance allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GDPR CCPA Compliance Support: from n/a through = 2.7.4...
EUVD-2026-4067
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in bslthemes Myour myour allows PHP Local File Inclusion.This issue affects Myour: from n/a through = 1.5.1...
CVE-2026-21922
...
EUVD-2026-2544
The List Site Contributors plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'alpha' parameter in versions up to, and including, 1.1.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary we...
EUVD-2026-2133
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate privileges locally...
EUVD-2026-0608
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2026-0699
A flaw has been found in Yonyou KSOA 9.0. Affected by this vulnerability is an unknown functionality of the file /worksheet/workupdate.jsp. This manipulation of the argument Report causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used. The vend...
EUVD-2025-203911
Cisco is aware of a potential vulnerability. Cisco is currently investigating and will update these details as appropriate as more information becomes available...
Exploit for Deserialization of Untrusted Data in Facebook React
This is a Next.js project bootstrapped wit...
CVE-2025-14325
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6...
CVE-2025-13145
creationtimestamp| type| source ---|---|--- 2025-11-19 09:04:13+00:00| seen| https://gist.github.com/Darkcrai86/5b2c675d4edba3f6d1a4a40e826bcf6b...
CVE-2025-11990
GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated user to gain CSRF tokens by exploiting improper input validation in repository references combined with redirect handling weaknesses...
MINI-RPG7-RX4V-299G
Bulletin has no description...
CVE-2025-53054
Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...
CVE-2025-62591
CVE-2025-62591 affects Oracle VM VirtualBox (Core) with affected versions 7.1.12 and 7.2.2. The entry notes a locally exploitable vulnerability requiring HIGH privileges, potentially allowing unauthorized data access or complete access to all VirtualBox data. No remediation/patch details are prov...