CVE-2026-4206

creationtimestamp| type| source ---|---|--- 2026-03-16 03:00:33+00:00| seen| https://infosec.exchange/users/offseq/statuses/116236617480442762...

CVE-2026-4201

creationtimestamp| type| source ---|---|--- 2026-03-16 01:30:42+00:00| seen| https://infosec.exchange/users/offseq/statuses/116236263599697730 2026-09-18 22:00:28+00:00| seen| https://bsky.app/profile/getpacketai.bsky.social/post/3mvt65negfe2u...

SUSE CVE-2010-4326

Multiple buffer overflows in gwwww1.dll in GroupWise Internet Agent GWIA in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via variables in a VCALENDAR message, as demonstrated by a long 1 REQUEST-STATUS, 2 TZNAME, 3 COMMENT, or 4 RRULE variable in this message...

PT-2026-25781

Name of the Vulnerable Software and Affected Versions Hereta ETH-IMC408M firmware versions prior to 1.0.15 Description The software contains a stored cross-site scripting issue that allows authenticated attackers to inject arbitrary JavaScript by manipulating the Device Name field. Attackers can...

PT-2026-25782

Name of the Vulnerable Software and Affected Versions Hereta ETH-IMC408M firmware versions prior to 1.0.15 Description The software contains a stored cross-site scripting issue that allows authenticated attackers to inject arbitrary JavaScript. The attack vector involves manipulating the Device...

PT-2026-25831

A security flaw has been discovered in Tiandy Easy7 Integrated Management Platform 7.17.0. The affected element is an unknown function of the file /rest/devStatus/queryResources of the component Endpoint. Performing a manipulation of the argument areaId results in sql injection. The attack can be...

CVE-2026-29513: Improper Neutralization of Input During Web Page Generation

Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary JavaScript by manipulating the Device Location field. Attackers can inject malicious scripts through the System Status interface that...

CVE-2026-29510: Improper Neutralization of Input During Web Page Generation

Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary JavaScript by manipulating the Device Name field. Attackers can inject malicious scripts through the System Status interface that execut...

EulerOS 2.0 SP12 : kernel (EulerOS-SA-2026-1366)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : tcpbpf: Call skmsgfree when tcpbpfsendverdict fails to allocate psock-cork.CVE-2025-39913 md: fix rcu protection in mdwakeupthreadCVE-2025-68374...

Moxa Discontinued Devices Detection

The current plugin identifies Moxa devices that are currently discontinued. Moxa Lifecycle Statuses: - Active: Product is currently available and supported. - Discontinued: Product has been phased out and is no longer manufactured or supported. %NASLMINLEVEL 80900 C Tenable Network Security, Inc...

Moxa Active Devices Detection

The current plugin identifies Moxa devices that are still under active support. Moxa Lifecycle Statuses: - Active: Product is currently available and supported. - Discontinued: Product has been phased out and is no longer manufactured or supported. %NASLMINLEVEL 80900 C Tenable Network Security,...

CVE-2026-4172

creationtimestamp| type| source ---|---|--- 2026-03-15 13:30:15+00:00| seen| https://infosec.exchange/users/offseq/statuses/116233431470559225...

CVE-2026-4214

creationtimestamp| type| source ---|---|--- 2026-03-15 12:10:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116233116826289548 2026-03-22 01:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhmfzsqvxo23...

CVE-2026-32813

creationtimestamp| type| source ---|---|--- 2026-03-15 09:48:43+00:00| published-proof-of-concept| https://github.com/Admidio/admidio/security/advisories/GHSA-3x67-4c2c-w45m 2026-03-22 04:59:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhmr6y6qgz2u 2026-03-24...

CVE-2026-4169

creationtimestamp| type| source ---|---|--- 2026-03-15 08:00:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116232134849452799...

CVE-2026-4164

creationtimestamp| type| source ---|---|--- 2026-03-15 05:00:39+00:00| seen| https://infosec.exchange/users/offseq/statuses/116231426999598589 2026-03-15 10:30:43+00:00| seen| https://infosec.exchange/users/offseq/statuses/116232724533104511...

CVE-2026-1947

creationtimestamp| type| source ---|---|--- 2026-03-15 03:30:33+00:00| seen| https://infosec.exchange/users/offseq/statuses/116231073126882425 2026-03-15 16:30:20+00:00| seen| https://infosec.exchange/users/offseq/statuses/116234139193218069...

CVE-2026-4163

creationtimestamp| type| source ---|---|--- 2026-03-15 00:00:57+00:00| seen| https://infosec.exchange/users/offseq/statuses/116230248058481531 2026-03-15 00:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116230365437082281 2026-03-15 12:00:35+00:00| seen|...

PT-2026-25572

A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affected is the function RSS Get Update...

CVE-2026-4184

creationtimestamp| type| source ---|---|--- 2026-03-14 22:13:45+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116229827149211024 2026-03-15 18:00:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116234493086189464 2026-03-19 20:00:14+00:00| seen|...