355 matches found
GHSA-FVVP-RJ8G-C7GC
creationtimestamp| type| source ---|---|--- 2026-04-02 22:22:50+00:00| seen| Telegram/8YijTp8Bkg1BgPYn1xfGtyu-IfZ2h3UIXQPTCviuLwYJAlo...
MINI-PG3R-G76V-C47G
Bulletin has no description...
CVE-2026-27180
creationtimestamp| type| source ---|---|--- 2026-02-18 21:30:16+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mf5zmgksbs2n 2026-02-18 21:30:18+00:00| seen| https://infosec.exchange/users/offseq/statuses/116093761184172626 2026-02-18 22:18:34+00:00| seen|...
📄 Microsoft Windows 11 build 10.0.27898.1000 Local Privilege Escalation
Proof of concept exploit designed to test a potential local privilege escalation vulnerability in Windows, specifically targeting a feature called AiRegistrySync. It checks if modifications made by a standard user in their own Registry profile can be automatically synchronized propagated into the...
EUVD-2026-4309
In the Linux kernel, the following vulnerability has been resolved: dm-verity: disable recursive forward error correction There are two problems with the recursive correction: 1. It may cause denial-of-service. In fecreadbufs, there is a loop that has 253 iterations. For each iteration, we may ca...
EUVD-2026-4244
Authorization Bypass Through User-Controlled Key vulnerability in XLPlugins NextMove Lite woo-thank-you-page-nextmove-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects NextMove Lite: from n/a through = 2.23.0...
EUVD-2026-3980
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in AivahThemes Anona anona allows Path Traversal.This issue affects Anona: from n/a through = 8.0...
EUVD-2026-4094
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Depot depot allows PHP Local File Inclusion.This issue affects Depot: from n/a through = 1.16...
EUVD-2026-4102
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jthemes xSmart xsmart allows Reflected XSS.This issue affects xSmart: from n/a through = 1.2.9.4...
EUVD-2026-3692
Not used...
EUVD-2026-2946
The Librarian contains a information leakage vulnerability through the webfetch tool, which can be used to retrieve arbitrary external content provided by an attacker, which can be used to proxy requests through The Librarian infrastructure. The vendor has fixed the vulnerability in all versions ...
EUVD-2026-2638
EUVD-2026-2638...
ECHO-9C2A-9FD9-F212
Bulletin has no description...
EUVD-2026-2103
Integer underflow wrap or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
EUVD-2026-2163
Improper input validation in Windows Server Update Service allows an unauthorized attacker to execute code over a network...
EUVD-2026-2365
Not used...
EUVD-2026-2222
Insecure permissions in Hubert Imoveis e Administracao Ltda Hub v2.0 1.27.3 allows authenticated attackers with low-level privileges to access other users' information via a crafted API request...
EUVD-2026-1214
In Aris v10.0.23.0.3587512 and before, the file upload functionality does not enforce any rate limiting or throttling, allowing users to upload files at an unrestricted rate. An attacker can exploit this behavior to rapidly upload a large volume of files, potentially leading to resource exhaustio...
EUVD-2026-1032
Forcepoint One DLP Client, version 23.04.5642 and possibly newer versions, includes a restricted version of Python 2.5.4 that prevents use of the ctypes library. ctypes is a foreign function interface FFI for Python, enabling calls to DLLs/shared libraries, memory allocation, and direct code...