Hitron HI3120 安全漏洞

The Hitron HI3120 is a cable modem produced by Hitron Company in Taiwan, China. The Hitron HI3120 v7.2.4.5.2b1 version contains a security vulnerability. This vulnerability arises from improper input handling during the creation of new filters, and it may lead to storage cross-site scripting...

PT-2026-7117

Hitron HI3120 v7.2.4.5.2b1 allows stored XSS via the Parental Control option when creating a new filter. The device fails to properly handle inputs, allowing an attacker to inject and execute JavaScript...

CVE-2026-2151

creationtimestamp| type| source ---|---|--- 2026-02-08 18:00:18+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3meej7rytxx2e 2026-02-08 18:00:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116036312485765301 2026-05-09 21:00:04+00:00| seen|...

CVE-2026-2165

A weakness has been identified in detronetdip E-commerce 1.0.0. Impacted is an unknown function of the file /Admin/assets/backend/seller/addseller.php of the component Account Creation Endpoint. Executing a manipulation of the argument email can lead to missing authentication. The attack can be...

CVE-2026-2165

A weakness has been identified in detronetdip E-commerce 1.0.0. Impacted is an unknown function of the file /Admin/assets/backend/seller/addseller.php of the component Account Creation Endpoint. Executing a manipulation of the argument email can lead to missing authentication. The attack can be...

CVE-2026-2165 detronetdip E-commerce Account Creation Endpoint add_seller.php missing authentication

A weakness has been identified in detronetdip E-commerce 1.0.0. Impacted is an unknown function of the file /Admin/assets/backend/seller/addseller.php of the component Account Creation Endpoint. Executing a manipulation of the argument email can lead to missing authentication. The attack can be...

EUVD-2026-5784

A weakness has been identified in detronetdip E-commerce 1.0.0. Impacted is an unknown function of the file /Admin/assets/backend/seller/addseller.php of the component Account Creation Endpoint. Executing a manipulation of the argument email can lead to missing authentication. The attack can be...

CVE-2026-23903

creationtimestamp| type| source ---|---|--- 2026-02-08 15:47:26+00:00| seen| https://seclists.org/oss-sec/2026/q1/148 2026-02-08 17:14:48+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3meegoheeuv2w...

CVE-2026-25881

creationtimestamp| type| source ---|---|--- 2026-02-08 10:32:31+00:00| published-proof-of-concept| https://github.com/nyariv/SandboxJS/security/advisories/GHSA-ww7g-4gwx-m7wj 2026-02-09 22:18:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mehi5amyms2a 2026-02-10...

CVE-2026-2187

creationtimestamp| type| source ---|---|--- 2026-02-08 09:22:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116034275302342033...

CVE-2026-2140

creationtimestamp| type| source ---|---|--- 2026-02-08 07:30:34+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3medfzphaux2u 2026-02-08 07:30:38+00:00| seen| https://infosec.exchange/users/offseq/statuses/116033836206401561...

CVE-2026-25723

creationtimestamp| type| source ---|---|--- 2026-02-08 04:40:05+00:00| seen| https://gist.github.com/alon710/7bbde07266f0ce6a4608d33da3c417d3...

CVE-2026-25857

creationtimestamp| type| source ---|---|--- 2026-02-08 04:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116033128377019948 2026-02-08 04:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3med3xtckhe2f...

CVE-2026-25754

creationtimestamp| type| source ---|---|--- 2026-02-08 03:10:06+00:00| seen| https://gist.github.com/alon710/8313d7afe645c9d035fed8ea6e3f58d8 2026-07-15 23:00:14+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mqpt6omwjh2x 2026-07-16 00:27:26+00:00| seen|...

GHSA-F5X2-VJ4H-VG4C

creationtimestamp| type| source ---|---|--- 2026-02-08 03:10:06+00:00| seen| https://gist.github.com/alon710/8313d7afe645c9d035fed8ea6e3f58d8...

CVE-2026-2120

creationtimestamp| type| source ---|---|--- 2026-02-08 01:30:35+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mecrvzwvft2f 2026-02-08 01:30:40+00:00| seen| https://infosec.exchange/users/offseq/statuses/116032420763986584...

GHSA-26GQ-GRMH-6XM6

creationtimestamp| type| source ---|---|--- 2026-02-08 01:10:05+00:00| seen| https://gist.github.com/alon710/9d16288fb5403944d09be7f88afc1b71...

GHSA-XX9G-FH25-4Q64

creationtimestamp| type| source ---|---|--- 2026-02-08 00:40:06+00:00| seen| https://gist.github.com/alon710/e2cbb4e3c7fdeb40d051c3d7c45483a1...

EUVD-2026-5708

WeKan versions prior to 8.19 contain an insecure direct object reference IDOR in checklist creation and related checklist routes. The implementation does not verify that the supplied cardId belongs to the supplied boardId, allowing cross-board ID tampering by manipulating identifiers...

EUVD-2026-5709

WeKan versions prior to 8.19 contain an insecure direct object reference IDOR in checklist creation and related checklist routes. The implementation does not verify that the supplied cardId belongs to the supplied boardId, allowing cross-board ID tampering by manipulating identifiers...