CVE-2026-23094

In the Linux kernel, the following vulnerability has been resolved: uacce: fix isolate sysfs check condition uacce supports the device isolation feature. If the driver implements the isolateerrthresholdread and isolateerrthresholdwrite callback functions, uacce will create sysfs files now. Users...

CVE-2026-23094 uacce: fix isolate sysfs check condition

In the Linux kernel, the following vulnerability has been resolved: uacce: fix isolate sysfs check condition uacce supports the device isolation feature. If the driver implements the isolateerrthresholdread and isolateerrthresholdwrite callback functions, uacce will create sysfs files now. Users...

CVE-2026-24735

creationtimestamp| type| source ---|---|--- 2026-02-04 15:24:46+00:00| seen| https://seclists.org/oss-sec/2026/q1/143 2026-02-04 16:36:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2counlic23 2026-02-04 16:46:22+00:00| seen|...

CVE-2026-23624

creationtimestamp| type| source ---|---|--- 2026-02-04 14:50:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3me24q3czij23...

CVE-2026-1447

The Mail Mint plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.19.2. This is due to missing nonce validation on the createorupdatenote function. This makes it possible for unauthenticated attackers to create or update contact notes via a...

CVE-2013-5700

creationtimestamp| type| source ---|---|--- 2026-02-04 12:24:17+00:00| seen| https://gist.github.com/dergoegge/b123d7feb183f7c19754da2ff87dc1f6...

CVE-2026-1756

creationtimestamp| type| source ---|---|--- 2026-02-04 07:22:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdzdpvblew23...

CVE-2026-25141

creationtimestamp| type| source ---|---|--- 2026-02-04 03:11:39+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mdyvp3er2f2s 2026-02-08 22:54:44+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3meezobsou22l 2026-05-20 05:21:43+00:00| seen|...

PT-2026-6261

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.18 n8n versions prior to 2.5.0 Description n8n is a workflow automation platform. A flaw in the file access controls allows authenticated users with appropriate permissions to read sensitive files from the n8n host...

PT-2026-6543

Name of the Vulnerable Software and Affected Versions rancher.io/local-path-provisioner versions prior to 0.0.34 Description A malicious user can manipulate the parameters.pathPattern to create PersistentVolumes in arbitrary locations on the host node, potentially overwriting sensitive files or...

CVE-2026-1862

creationtimestamp| type| source ---|---|--- 2026-02-03 22:20:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdyfgcem7g23 2026-02-04 07:04:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116011083135727551 2026-02-04 13:00:14+00:00| seen|...

CVE-2026-1861

creationtimestamp| type| source ---|---|--- 2026-02-03 22:20:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdyfg2mq6w2a 2026-02-04 07:18:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116011138463439555 2026-02-04 13:00:14+00:00| seen|...

CVE-2020-37091

Maian Support Helpdesk 4.3 contains a cross-site request forgery vulnerability that allows attackers to create administrative accounts without authentication. Attackers can craft malicious HTML forms to add admin users and upload PHP files with unrestricted file upload capabilities through the FA...

CVE-2020-37091 Maian Support Helpdesk 4.3 - Cross-Site Request Forgery (Add Admin)

Maian Support Helpdesk 4.3 contains a cross-site request forgery vulnerability that allows attackers to create administrative accounts without authentication. Attackers can craft malicious HTML forms to add admin users and upload PHP files with unrestricted file upload capabilities through the FA...

CVE-2020-37091

Maian Support Helpdesk 4.3 is affected by a cross-site request forgery (CSRF) vulnerability that allows attackers to create administrative accounts without authentication. Exploitation involves crafting malicious HTML forms to add admin users and upload PHP files via the FAQ attachment system, en...

GHSA-VHW6-HQH9-8R23

creationtimestamp| type| source ---|---|--- 2026-02-03 21:28:42+00:00| seen| Telegram/EolE0KtGpDyhwFa3K4uFjcrZ6zOl1wT5WaMQuq2zHWr2Ac...

CVE-2026-25239

creationtimestamp| type| source ---|---|--- 2026-02-03 21:28:42+00:00| seen| Telegram/EolE0KtGpDyhwFa3K4uFjcrZ6zOl1wT5WaMQuq2zHWr2Ac...

GHSA-P92V-9J73-FXX3

creationtimestamp| type| source ---|---|--- 2026-02-03 21:28:17+00:00| seen| Telegram/jaM2tUQzkaVMcebBQi-nzxb3NypB-XkwSNfDQyWeWplRyfw...

CVE-2025-13428

creationtimestamp| type| source ---|---|--- 2026-02-03 21:27:41+00:00| seen| Telegram/gZreaDaUAqPCEwGOcQjlkFNKXwvUOBtZbDSTxEY5AfXiJg...

CVE-2026-25510 CI4MS Vulnerable to Remote Code Execution (RCE) via Arbitrary File Creation and Save in File Editor

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.28.5.0, an authenticated user with file editor permissions can achieve Remote Code Execution RCE by leveraging the file creation and sav...