MiracleLinux 3 : hplip-1.6.7-4.1.4.1AXS3 (AXSA:2008-271:01)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2008-271:01 advisory. Description of problem: The hplip Hewlett-Packard Linux Imaging and Printing packages provide drivers for Hewlett-Packard printers and multifunction...

GHSA-7HG4-X4PR-3HRG

creationtimestamp| type| source ---|---|--- 2026-01-13 22:35:10+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115890173342129291 2026-01-15 12:01:11+00:00| seen| https://bsky.app/profile/blackhatnews.tokyo/post/3mchjxkdx3t2o...

CVE-2025-13447

creationtimestamp| type| source ---|---|--- 2026-01-13 11:18:07+00:00| seen| https://social.tchncs.de/users/gborn/statuses/115887511093695459 2026-01-13 11:18:32+00:00| seen| https://bsky.app/profile/etguenni.bsky.social/post/3mccgnhwwjc2k 2026-01-13 14:54:30+00:00| seen|...

CVE-2025-66802

creationtimestamp| type| source ---|---|--- 2026-01-12 22:17:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcb2yz4ats2c 2026-01-12 22:30:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcb3qdzq7w2e...

CVE-2026-22200

creationtimestamp| type| source ---|---|--- 2026-01-12 20:07:23+00:00| seen| Telegram/8sAp-VzdCpmBtZpXHcIlhxzqtmWknERFSKz0UU7al4qy2OU 2026-01-12 21:31:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcayhdxtmk2o 2026-01-12 21:34:25+00:00| seen|...

EUVD-2026-1962

Malicious code in tailwindcss-animate-tool npm...

EUVD-2026-1976

Malicious code in xml2js-js npm...

GHSA-J9XQ-69PF-PCM8

creationtimestamp| type| source ---|---|--- 2026-01-10 07:01:56+00:00| seen| Telegram/QuRUgWCRdNzWcYTios3SXh8Vy406o-CwKkI1neN56hwn-As...

CVE-2026-22610

creationtimestamp| type| source ---|---|--- 2026-01-10 05:03:11+00:00| seen| Telegram/Oq5Ood4NSq2MjX-UETlnapDxCUgYA-dHZPJgTTRAs320 2026-01-10 05:44:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mc2ckwz7zu2c 2026-01-13 05:31:34+00:00| seen|...

S-DAPT-2026: A Stage-Aware Synthetic Dataset for Advanced Persistent Threat Detection

The detection of advanced persistent threats APTs remains a crucial challenge due to their stealthy, multistage nature and the limited availability of realistic, labeled datasets for systematic evaluation. Synthetic dataset generation has emerged as a practical approach for modeling APT campaigns...

CVE-2025-66050 No password set for administrative account in Vivotek IP7137 cameras

Vivotek IP7137 camera with firmware version 0200a by default dos not require to provide any password when logging in as an administrator. While it is possible to set up such a password, a user is not informed about such a need. The vendor has not replied to the CNA. Possibly all firmware versions...

CVE-2021-0985

In onReceive of AlertReceiver.java, there is a possible way to dismiss system dialog due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2025-23113

An issue was discovered in REDCap 14.9.6. It has an action=myprojects=1 CSRF issue in the alert-title while performing an upload of a CSV file containing a list of alert configuration. An attacker can send the victim a CSV file containing an HTML injection payload in the alert-title. Once the...

CVE-2025-23196

A code injection vulnerability exists in the Ambari Alert Definition feature, allowing authenticated users to inject and execute arbitrary shell commands. The vulnerability arises when defining alert scripts, where the script filename field is executed using sh -c. An attacker with authenticated...

CVE-2019-18659

The Wireless Emergency Alerts WEA protocol allows remote attackers to spoof a Presidential Alert because cryptographic authentication is not used, as demonstrated by MessageIdentifier 4370 in LTE System Information Block 12 aka SIB12. NOTE: testing inside an RF-isolated shield box suggested that...

CVE-2023-49765

Authorization Bypass Through User-Controlled Key vulnerability in Blaz K. Rate my Post – WP Rating System.This issue affects Rate my Post – WP Rating System: from n/a through 3.4.1...

CVE-2019-18265

Digital Alert Systems’ DASDEC software prior to version 4.1 contains a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via the SSH username, username field of the login page, or via the HTTP host header. The injected content is stored in...

CVE-2023-25178

Controller may be loaded with malicious firmware which could enable remote code execution. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2025-23821

Cross-Site Request Forgery CSRF vulnerability in aleapp WP Cookies Alert wp-cookies-alert allows Cross Site Request Forgery.This issue affects WP Cookies Alert: from n/a through = 1.1.1...

PT-2026-2009

Name of the Vulnerable Software and Affected Versions ALGO 8180 IP Audio Alerter affected versions not specified Description A flaw exists in the web-based user interface of the ALGO 8180 IP Audio Alerter that allows remote attackers to execute arbitrary code. Authentication is required for...