32055 matches found
CVE-2025-63823
My Safetipin Android Application 5.2.1 contains Hardcoded credentials in the authentication module, which allows remote attackers to bypass authentication and gain unauthorized access to user accounts via predictable OTP values...
CVE-2025-70962
Zosi C519M V4.2.8.823C01450BA is vulnerable to Incorrect Access Control. The application contains hardcoded credentials in the RTSP authentication mechanism. An attacker with network access can use the unchangeable default credentials to access the RTSP video stream, resulting in unauthorized...
CVE-2026-11920: Improper Neutralization of Special Elements used in an SQL Command
The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to time-based SQL Injection via the 'order' parameter in all versions up to, and including, 5.7.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on...
Non-constant time webhook bearer token comparison in webhook-secret-credentials-provider
webhook-secret-credentials-provider 16.v0cfaf0215cf5 and earlier does not use a constant-time comparison function when checking whether the provided and expected webhook bearer token are equal. This could potentially allow attackers to use statistical methods to obtain a valid webhook bearer toke...
CVE-2025-63823
My Safetipin Android Application 5.2.1 contains Hardcoded credentials in the authentication module, which allows remote attackers to bypass authentication and gain unauthorized access to user accounts via predictable OTP values...
CVE-2026-15941: Improper Neutralization of Special Elements used in an SQL Command
The plugin provides an Admin Search page that allows users with the editposts capability to run Relevanssi searches from the WordPress dashboard. The AJAX handler accepts a URL-encoded args parameter, parses it into a WPQuery, and then passes user-controlled taxonomy query data into Relevanssi's...
CVE-2025-63823
My Safetipin Android Application 5.2.1 contains Hardcoded credentials in the authentication module, which allows remote attackers to bypass authentication and gain unauthorized access to user accounts via predictable OTP values...
CVE-2017-20242
creationtimestamp| type| source ---|---|--- 2026-08-04 19:16:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbpybpcej2z...
pyasn1: python-pyasn1: pyasn1: Denial of Service via crafted ASN.1 OBJECT IDENTIFIER
A flaw was found in pyasn1, a Python library for Abstract Syntax Notation One ASN.1. The BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs. A remote attacker could exploit this by providing a specially crafted payload...
CVE-2026-24083
creationtimestamp| type| source ---|---|--- 2026-08-04 17:01:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msbihshx5l2l...
CVE-2026-25288
Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size...
Malicious code in @servicetitan/time-zones (npm)
npm/@servicetitan/time-zones is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
Malicious code in @onereach/time-interpreter (npm)
npm/@onereach/time-interpreter is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
MAL-2026-11657 Malicious code in @onereach/time-interpreter (npm)
npm/@onereach/time-interpreter is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
GHSA-33VJ-92QQ-66HC
creationtimestamp| type| source ---|---|--- 2026-08-04 15:15:12+00:00| seen| https://gist.github.com/cwayne18/2df919c96745d903491c33321eb89359 2026-08-05 12:34:16+00:00| seen| https://gist.github.com/cwayne18/b5c32c67446c8ec50f54ec955ba4ef5b 2026-08-05 21:55:34+00:00| seen|...
CVE-2026-25288 Buffer Over-read in WLAN Firmware
Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size...
CVE-2026-25288 Buffer Over-read in WLAN Firmware
Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size...
CVE-2026-25288
CVE-2026-25288 refers to a transient denial-of-service in WLAN firmware when handling a short target wake time channel usage response frame built with insufficient packet size. Documented in multiple sources (CVE, NVD, CVE list, EUVD), this appears to affect WLAN firmware as reported, with root c...
