35433 matches found
CVE-2026-9592
SEPPmail Secure Email Gateway & SEPPmail Cloud before version 15.0.4.2 allows an attacker to replay & hijack a user session in the GINA web portal, as the session token is disclosed inside the URL and a HTTP header...
Shark vacuum flaw exposes cameras, home maps and Wi-Fi passwords
Shark’s cloud-connected robot vacuums are currently exposed by an unpatched AWS Amazon Web Services IoT Internet of Things policy flaw that could turn one compromised device into a remote-control skeleton key for many others in the same region, with access to cameras, maps, and Wi‑Fi passwords. A...
Server-Side Request Forgery (SSRF)
github.com/julien040/anyquery, is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to the server mode not restricting outbound HTTP requests initiated by its built-in SQLite virtual table modules such as jsonreader and logreader, which allows an unauthenticated attacker to...
PT-2026-60778
Missing Authorization in Google Cloud Firebase Studio versions prior to 2026-04-15 on Google Cloud Platform allows an attacker to download other users' deployed source code and access sensitive data via unauthorized GCS URL signing requests. This vulnerability was patched on 15 April 2026, and no...
Microsoft ASP.NET Core privilege escalation vulnerability (CNVD-2026-28484)
Microsoft ASP.NET Core is a cross-platform open-source framework developed by Microsoft. This framework is used to build cloud-based applications such as web applications, IoT applications, and mobile backends. There is a permission escalation vulnerability in Microsoft ASP.NET Core, which allows...
Alibaba Cloud Linux 3 : 0209: kernel (ALINUX3-SA-2026:0209)
"The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0209 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-43499: In the Linux kernel, the...
MAL-2026-10748 Malicious code in string-formatter-pro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 966ebbfb039acea9e1f98c5f74f13e2aab1617e371719bc9543315702dbd67cd The package advertises itself as a string-formatting utility whose main module exports only a trivial one-line capitalize function, but ships a...
CVE-2026-63086
text-generation-inference through 3.3.7 contains a server-side request forgery SSRF vulnerability in the OpenAI-compatible multimodal chat completions endpoint that allows unauthenticated network attackers to coerce the server into issuing arbitrary HTTP GET requests by supplying a crafted imageu...
CVE-2026-11386
An input validation and injection vulnerability exists in Canonical ubuntu-pro-client formerly ubuntu-advantage-tools. The client constructs APT source files such as /etc/apt/sources.list.d/ubuntu-.list or their DEB822 equivalents using data received directly from the contract server response via...
Unpatched Shark Vacuum Flaw Could Let Attackers Control Other Vacuums Region-Wide
Pull the certificate off the flash of a Shark RV2320EDUS robot vacuum, and you can run root commands on other people's Shark vacuums across the same AWS region: watch the camera, drive the robot, read the map of the house, and take the Wi-Fi password in plaintext. A researcher publishing under th...
GHSA-XX4X-7C38-RPQ3 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-gcp...
GHSA-38H5-PJW3-MQXF vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-gcp...
CVE-2026-43095 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-gcp...
GHSA-WVXF-4P9H-5VG9 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-qemu...
GHSA-RGJ9-VX7J-X86J vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-qemu...
GHSA-X9PC-8G9F-68MF vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-qemu...
GHSA-JHVQ-4R2H-7C2Q vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-qemu...
CVE-2026-53260 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-qemu...