Astro - Unauthorized Third-Party Image Access

Astro 5.13.2 and 4.16.18 contains an information disclosure vulnerability caused by improper validation of protocol-relative URLs in the image optimization endpoint, letting attackers serve images from unauthorized third-party domains, exploit requires on-demand rendering deployment. id:...

NETGEAR DGN2200 / DGND3700 - Admin Password Disclosure

NETGEAR DGN2200 / DGND3700 is susceptible to a vulnerability within the page 'BSWcxttongr.htm' which can allow a remote attacker to access this page without any authentication. The attacker can then use this password to gain administrator access of the targeted router's web interface. id:...

WPS Hide Login <= 1.9.15.2 - Login Page Disclosure

The WPS Hide Login plugin for WordPress is vulnerable to Login Page Disclosure in all versions up to, and including, 1.9.15.2. This is due to a bypass that is created when the 'action=postpass' parameter is supplied. This makes it possible for attackers to easily discover any login page that may...

BEWARD N100 H.264 VGA IP Camera M2.1.6 - Arbitrary File Disclosure

Beward N100 H.264 VGA IP Camera M2.1.6 contains an authenticated file disclosure vulnerability caused by improper validation of the 'READ.filePath' parameter in fileread script and SendCGICMD API, letting authenticated attackers read arbitrary system files. id: CVE-2019-25246 info: name: BEWARD...

Wowza Streaming Engine Manager 4.7.4.01 - Directory Traversal

Wowza Streaming Engine 4.7.4.01 allows traversal of the directory structure and retrieval of a file via a remote, specifically crafted HTTP request to the REST API. id: CVE-2018-19365 info: name: Wowza Streaming Engine Manager 4.7.4.01 - Directory Traversal author: 0xAkoko severity: critical...

WP Cerber < 8.9.3 - Broken Access Control

WP Cerber 8.9.3 contains a bypass of /wp-json access control caused by improper handling of trailing '?' character, letting unauthorized users access protected REST API endpoints, exploit requires sending a request with a trailing '?'. id: CVE-2021-37598 info: name: WP Cerber 8.9.3 - Broken Acces...

GHSA-C974-W86C-VPFW vulnerabilities

Vulnerabilities for packages: open-cluster-management-fips, ansible-operator, crossplane-provider-aws-ec2, grype-fips, packer-fips, crossplane-provider-terraform, virt-api, crossplane-provider-aws-guardduty-fips, crossplane-provider-aws-location-fips, cue, crossplane-provider-aws-s3,...

MINI-8W48-G5WV-5M45

Bulletin has no description...

CVE-2026-72836

creationtimestamp| type| source ---|---|--- 2026-08-14 13:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mt27o7uejz26 2026-08-14 13:06:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hiobi5qimz7ko 2026-08-14 13:20:05+00:00| seen|...

GO-2026-5371 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, kyverno-notation-aws-fips...

GO-2026-5374 vulnerabilities

Vulnerabilities for packages: kyverno, kyverno-notation-aws...

CVE-2026-73613

creationtimestamp| type| source ---|---|--- 2026-08-14 07:00:34+00:00| seen| https://www.acn.gov.it/portale/w/file-browser-disponibili-poc-per-lo-sfruttamento-di-nuove-vulnerabilita 2026-08-15 01:00:38+00:00| seen|...

EUVD-2026-57934

Unauthenticated Cross Site Scripting XSS in MailChimp Subscribe Forms = 4.3.3 versions...

CVE-2026-65528

creationtimestamp| type| source ---|---|--- 2026-08-12 18:16:19+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msvqeq72qf2u...

CVE-2026-72779

creationtimestamp| type| source ---|---|--- 2026-08-11 20:45:07+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-craft-cms-1...

CVE-2026-62699

creationtimestamp| type| source ---|---|--- 2026-08-11 19:02:03+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:21:37+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:02:00+00:00| seen|...

CVE-2026-62695

creationtimestamp| type| source ---|---|--- 2026-08-11 19:02:00+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:20:38+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:57+00:00| seen|...

CVE-2026-70347

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:47+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:18:35+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:44+00:00| seen|...

CVE-2026-65662

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:42+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:20:42+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:39+00:00| seen|...

CVE-2026-61923

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:38+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:45:21+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:35+00:00| seen|...