CVE-2026-1686

A security flaw has been discovered in Totolink A3600R 5.9c.4959. This issue affects the function setAppEasyWizardConfig in the library /lib/cstemodules/app.so. Performing a manipulation of the argument apcliSsid results in buffer overflow. It is possible to initiate the attack remotely. The...

Ubuntu: Security Advisory (USN-7983-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Brookstrut Sample App component allows unauthorized access for reading, updating, inserting, or deleting data, enabling attackers to gain unauthorized control over the data using APEX Sample Applications.

The vulnerability of the Brookstrut Sample App, a sample application for demonstrating functions using APEX Sample Applications test data, is related to insufficient testing of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to read,...

CVE-2025-71003

creationtimestamp| type| source ---|---|--- 2026-01-29 21:34:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdlqirvw7o2r 2026-01-29 21:34:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdlqj4ouab27...

CVE-2020-37000

creationtimestamp| type| source ---|---|--- 2026-01-29 18:20:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdlfpenzch2g...

CVE-2026-1594

creationtimestamp| type| source ---|---|--- 2026-01-29 18:09:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdlf3asnx426...

CVE-2025-26790

creationtimestamp| type| source ---|---|--- 2026-01-29 16:15:11+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mdl6omhgqv2j...

Improper Check for Unusual or Exceptional Conditions

Overview Affected versions of this package are vulnerable to Improper Check for Unusual or Exceptional Conditions in the flow.scatter function. An attacker can cause the application to become unresponsive or crash by submitting out-of-bound indexes. Remediation There is no fixed version for...

Unfurl's debug mode cannot be disabled due to string config parsing (Werkzeug debugger exposure)

Summary The Unfurl web app enables Flask debug mode even when configuration sets debug = False. The config value is read as a string and passed directly to app.rundebug=..., so any non-empty string evaluates truthy. This leaves the Werkzeug debugger active by default. Details - unfurl/app.py:weba...

GHSA-VG9H-JX4V-CWX2 Unfurl's debug mode cannot be disabled due to string config parsing (Werkzeug debugger exposure)

Summary The Unfurl web app enables Flask debug mode even when configuration sets debug = False. The config value is read as a string and passed directly to app.rundebug=..., so any non-empty string evaluates truthy. This leaves the Werkzeug debugger active by default. Details - unfurl/app.py:weba...

CVE-2026-25047

creationtimestamp| type| source ---|---|--- 2026-01-29 10:32:43+00:00| published-proof-of-concept| https://github.com/sharpred/deepHas/security/advisories/GHSA-2733-6c58-pf27 2026-01-29 23:33:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdlx6pldxr2n 2026-04-30 07:21:10+00:00|...

CVE-2025-55704

creationtimestamp| type| source ---|---|--- 2026-01-29 05:19:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdjzzzmkqe2c...

CVE-2026-1551

creationtimestamp| type| source ---|---|--- 2026-01-29 03:25:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdjtnztphc2h...

ROS-20260129-73-0048

Vulnerability in nextcloud-app-calendar related to improper handling of an unexpected data type. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

PT-2026-5360

Name of the Vulnerable Software and Affected Versions Budibase versions prior to 3.26.4 Description Budibase is a low code platform used for building internal tools, workflows, and admin panels. A Creator-level user, normally lacking UI permissions to invite users, can manipulate API requests to...

CVE-2026-1479

An out-of-band SQL injection vulnerability OOB SQLi has been detected in the Performance Evaluation EDD application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameters 'Idusuario' and 'Idevaluacion’ in ‘/evaluacionhcaverauto.asp', could allow an attacker...

CVE-2026-1482

An out-of-band SQL injection vulnerability OOB SQLi has been detected in the Performance Evaluation EDD application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter 'Idevaluacion' in '/evaluacionobjetivosevaluadefinido.aspx', could allow an attacker to...

CVE-2026-1480

An out-of-band SQL injection vulnerability OOB SQLi has been detected in the Performance Evaluation EDD application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter 'Idusuario' in '/evaluacionobjetivosanyosigevalua.aspx', could allow an attacker to...

CVE-2026-1476

An out-of-band SQL injection vulnerability OOB SQLi has been detected in the Performance Evaluation EDD application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter 'Idusuario' in ‘/evaluacionaccionesverauto.aspx’, could allow an attacker to extract...

CVE-2023-37525

CVE-2023-37525 affects HCL BigFix Compliance. The connected sources describe a sensitive information disclosure that lets a remote attacker access files under the WEB-INF directory, potentially exposing Java class files and configuration information and leading to unauthorized access to applicati...