37652 matches found
CVE-2026-9190: Inconsistent Interpretation of HTTP Requests
An HTTP request smuggling vulnerability in the HTTP App Server of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker to bypass authentication and authorization checks, hijack a legitimate user's session, or capture credentials. The vulnerability occurs when a crafted HTTP...
CVE-2026-18853
A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android. This issue affects the function t5.l.c of the component com.zombodroid.MemeGenerator. Such manipulation leads to path traversal. Local access is required to approach this attack. The exploit has been...
CVE-2026-18853
CVE-2026-18853 affects ZomboDroid Meme Generator App for Android (version 4.6830) through the function t5.l.c of component com.zombodroid.MemeGenerator, enabling path traversal. Local access is required. The exploit has been publicly disclosed, and the vendor has not responded to the disclosure. ...
CVE-2026-18853 ZomboDroid Meme Generator App com.zombodroid.MemeGenerator t5.l.c path traversal
A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android. This issue affects the function t5.l.c of the component com.zombodroid.MemeGenerator. Such manipulation leads to path traversal. Local access is required to approach this attack. The exploit has been...
CVE-2026-18853 ZomboDroid Meme Generator App com.zombodroid.MemeGenerator t5.l.c path traversal
A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android. This issue affects the function t5.l.c of the component com.zombodroid.MemeGenerator. Such manipulation leads to path traversal. Local access is required to approach this attack. The exploit has been...
CVE-2026-70486
creationtimestamp| type| source ---|---|--- 2026-08-04 21:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msbvth5jkk2n 2026-08-04 22:35:16+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-3xpf-xq7r-v8c5...
Exploit for CVE-2026-69243
CVE-2026-69243 — aiohttp Request Smuggling CWE-444 Request...
CVE-2026-49435
creationtimestamp| type| source ---|---|--- 2026-08-04 19:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbq3sut7l22 2026-08-04 20:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msbsho4k232t...
CVE-2026-66257
creationtimestamp| type| source ---|---|--- 2026-08-04 18:07:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/amyetcwzytgq5...
opencode v1.18.13
The open source AI coding agent. English | 简体中文 | 繁體中文 | 한국어 | Deutsch | Español | Français | Italiano | Dansk | 日本語 | Polski | Русский | Bosanski | العربية | Norsk | Português Brasil | ไทย | Türkçe | Українська | বাংলা | Ελληνικά | Tiếng Việt Installation root@kitploit: YOLO curl -fsSL...
CVE-2026-18759
creationtimestamp| type| source ---|---|--- 2026-08-04 10:00:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5qefft3avhhdd...
CVE-2026-59774
creationtimestamp| type| source ---|---|--- 2026-08-04 07:54:05+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3msajuqcla72s 2026-08-05 12:00:04+00:00| published-proof-of-concept| https://t.me/thehackernews/9713 2026-08-05 12:27:01+00:00| seen|...
CVE-2026-16881
A code injection vulnerability exists in the LINE Android app prior to version 26.7.2. The profile rendering component does not adequately validate or sandbox externally supplied script content embedded in profile templates. As a result, an attacker who is able to place crafted content in a profi...
Multiple vulnerabilities in DEEBOT PRO M1, DEEBOT PRO K1VAC and ECOVACS PRO App
Overview Robotic cleaners DEEBOT PRO M1 and DEEBOT PRO K1VAC, and mobile app ECOVACS PRO App developed by ECOVACS ROBOTICS contain multiple vulnerabilities. They are provided in Japan by Hellohas Robotics Inc. web server for debugging purposes remains enabled CWE-489 - CVE-2026-66403 Missing serv...
EUVD-2026-52574
A code injection vulnerability exists in the LINE Android app prior to version 26.7.2. The profile rendering component does not adequately validate or sandbox externally supplied script content embedded in profile templates. As a result, an attacker who is able to place crafted content in a profi...
CVE-2026-16881
The LINE Android app (before 26.7.2) contains a vulnerability in the profile rendering component where externally supplied script content embedded in profile templates is not adequately validated or sandboxed. This can allow crafted profile content to execute arbitrary code with the app’s privile...
CVE-2026-16881
A code injection vulnerability exists in the LINE Android app prior to version 26.7.2. The profile rendering component does not adequately validate or sandbox externally supplied script content embedded in profile templates. As a result, an attacker who is able to place crafted content in a profi...
PT-2026-67895
Name of the Vulnerable Software and Affected Versions ZomboDroid Meme Generator App version 4.6830 Description A path traversal issue exists in the com.zombodroid.MemeGenerator component, specifically within the t5.l.c function. Path traversal is a flaw that allows an attacker to access files and...
EUVD-2026-52442
A vulnerability was detected in Blix Email Blue Mail Calendar App 2.2.305. Impacted is the function FileDirectory.getDataColumn/FileDirectory.getFileFromUri of the component react-native-receive-sharing-intent. The manipulation of the argument displayname results in path traversal. The attack is...
CVE-2026-18648
Blix Email Blue Mail Calendar App 2.2.305 is affected by a path traversal in the component react-native-receive-sharing-intent, specifically FileDirectory.getDataColumn/FileDirectory.getFileFromUri. The vulnerability arises from manipulating the _display_name argument, enabling local access explo...