1997 matches found
CVE-2026-24032
A vulnerability has been identified in SINEC NMS All versions V4.0 SP3 with UMC. The affected application contains an authentication weakness due to insufficient validation of user identity in the UMC component. This could allow an unauthenticated remote attacker to bypass authentication and gain...
CVE-2026-21716 affecting package nodejs24 for versions less than 24.14.1-1
CVE-2026-21716 affecting package nodejs24 for versions less than 24.14.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-35388 affecting package openssh for versions less than 9.8p1-6
CVE-2026-35388 affecting package openssh for versions less than 9.8p1-6. A patched version of the package is available...
CVE-2026-25203
Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability This issue affects MagicINFO 9 Server: less than 21.1091.1...
CVE-2026-25203
Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability This issue affects MagicINFO 9 Server: less than 21.1091.1...
📄 FortiWeb 8.0.1 Remote Code Execution
FortiWeb remote code execution exploit that affects versions prior to 7.6.7, 7.8.7, and 8.0.2. Exploit Title: FortiWeb 8.0.2 - Remote Code Execution Date: 2025-11-22 Author: Mohammed Idrees Banyamer Author Country: Jordan Instagram: @banyamersecurity GitHub: https://github.com/mbanyamer Vendor...
CVE-2026-33554 affecting package freeipmi for versions less than 1.6.17-1
CVE-2026-33554 affecting package freeipmi for versions less than 1.6.17-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-21716 affecting package nodejs for versions less than 20.14.0-15
CVE-2026-21716 affecting package nodejs for versions less than 20.14.0-15. A patched version of the package is available...
CVE-2026-32778 affecting package expat for versions less than 2.6.4-5
CVE-2026-32778 affecting package expat for versions less than 2.6.4-5. A patched version of the package is available...
EUVD-2026-20152
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in John Darrel Hide My WP Ghost hide-my-wp allows Phishing.This issue affects Hide My WP Ghost: from n/a through 7.0.00...
CVE-2026-39506
Missing Authorization vulnerability in Jordy Meow AI Engine Pro ai-engine-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Engine Pro: from n/a through 3.4.2...
CVE-2026-39484
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in John Darrel Hide My WP Ghost hide-my-wp allows Phishing.This issue affects Hide My WP Ghost: from n/a through 7.0.00...
CVE-2026-1839
A flaw was found in HuggingFace Transformers. A remote attacker can exploit this vulnerability by supplying a specially crafted checkpoint file e.g., rngstate.pth. The loadrngstate method in the Trainer class loads this file using torch.load without proper validation, specifically missing the...
CVE-2026-1839
CVE-2026-1839 concerns the HuggingFace Transformers library, affecting the Trainer class. The root cause is an unsafe load in src/transformers/trainer.py: _load_rng_state() calls torch.load() without weights_only=True, which can allow arbitrary code execution when loading a malicious checkpoint (...
CVE-2026-32287 affecting package telegraf for versions less than 1.31.0-16
CVE-2026-32287 affecting package telegraf for versions less than 1.31.0-16. A patched version of the package is available...
CVE-2026-25645 affecting package python-requests for versions less than 2.31.0-4
CVE-2026-25645 affecting package python-requests for versions less than 2.31.0-4. A patched version of the package is available...
CVE-2026-23138 affecting package kernel for versions less than 6.6.130.1-3
CVE-2026-23138 affecting package kernel for versions less than 6.6.130.1-3. A patched version of the package is available...
CVE-2026-23066 affecting package kernel for versions less than 6.6.130.1-3
CVE-2026-23066 affecting package kernel for versions less than 6.6.130.1-3. A patched version of the package is available...