CGA-WFGX-X98F-7JMQ

Bulletin has no description...

GHSA-W3G8-FP6J-WVQW

creationtimestamp| type| source ---|---|--- 2026-01-10 07:01:39+00:00| seen| Telegram/i2g9ck4oFpG2FQ6NO-wq7UgJ3FLiFKBZXo4--EYsPHmrFO0 2026-01-24 21:26:26+00:00| seen| https://gist.github.com/alon710/878cd9236baa69530b4f35d4110af1c3 2026-01-24 22:41:48+00:00| seen|...

GHSA-2G22-WG49-FGV5

creationtimestamp| type| source ---|---|--- 2026-01-10 05:02:58+00:00| published-proof-of-concept| Telegram/UDMk206lgQvLt4zm60yBzpmxh6GeqSRvdRaLpn90JAOiIEo 2026-01-24 21:26:05+00:00| seen| https://gist.github.com/alon710/e76d8e58dcc89b6a3002c30580fbeb4c 2026-01-24 22:41:27+00:00| seen|...

CryptoLib 安全漏洞

CryptoLib is a NASA open source application. It is used to provide a software-only solution using the CCSDS space data link security protocol. A security vulnerability exists in CryptoLib versions prior to 1.4.3 that stems from a failure to free an allocated buffer when the KMC server returns a...

GHSA-88Q6-JCJG-HVMW

creationtimestamp| type| source ---|---|--- 2026-01-09 19:48:39+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115866869324784128 2026-01-24 21:26:08+00:00| seen| https://gist.github.com/alon710/7d72130b31a9e6a47f1517e8d0e061e1 2026-01-24 22:41:31+00:00| seen|...

CVE-2025-69542

creationtimestamp| type| source ---|---|--- 2026-01-09 17:43:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115866375540072178 2026-01-09 18:44:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbz5pebl222o 2026-01-09 22:15:47+00:00| published-proof-of-concept|...

CVE-2025-70161

creationtimestamp| type| source ---|---|--- 2026-01-09 16:52:53+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115866178180399766 2026-01-09 18:47:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbz5tto4j62m 2026-01-12 18:01:14+00:00| seen|...

CVE-2025-13717

creationtimestamp| type| source ---|---|--- 2026-01-09 13:26:56+00:00| seen| https://gist.github.com/Darkcrai86/1d69ce62eb6a596f6b8c86840faa80a0 2026-01-09 15:24:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbysk5s5ma2e...

CVE-2023-49410

Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function via the function setwanstatus...

CVE-2023-31851

Cudy LT400 1.13.4 is has a cross-site scripting XSS vulnerability in /cgi-bin/luci/admin/network/wireless/status via the iface parameter...

CVE-2023-31114

An issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300. Incorrect resource transfer between spheres can cause unintended querying of the SIM status via a crafted application...

CVE-2021-28703

grant table v2 status pages may remain accessible after de-allocation take two Guest get permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated / associated with a guest for its entire lifetime. Grant table v2 status pages, however, get de-allocated whe...

CVE-2022-23232

StorageGRID formerly StorageGRID Webscale versions prior to 11.6.0 are susceptible to a vulnerability which when successfully exploited could allow disabled, expired, or locked external user accounts to access S3 data to which they previously had access. StorageGRID 11.6.0 obtains the user accoun...

CVE-2022-42990

Food Ordering Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /foms/all-orders.php?status=Cancelled%20by%20Customer...

CVE-2022-31021

Ursa is a cryptographic library for use with blockchains. A weakness in the Hyperledger AnonCreds specification that is not mitigated in the Ursa and AnonCreds implementations is that the Issuer does not publish a key correctness proof demonstrating that a generated private key is sufficient to...

CVE-2022-0421

The Five Star Restaurant Reservations WordPress plugin before 2.4.12 does not have authorisation when changing whether a payment was successful or failed, allowing unauthenticated users to change the payment status of arbitrary bookings. Furthermore, due to the lack of sanitisation and escaping,...

CVE-2020-12766

Gnuteca 3.8 allows action=main:search:simpleSearch SQL Injection via the exemplaryStatusId parameter...

CVE-2020-12472

MonoX through 5.1.40.5152 allows stored XSS via User Status, Blog Comments, or Blog Description...

CVE-2025-13521

The WP Status Notifier plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to update the plugin...

CVE-2025-40695

Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a stored authenticated XSS due to the lack of propper validation of user inputs 'remark', 'status' and 'takeaction' parameters via POST at the endpoint '/ofrs/admin/request-details.php'. This...