Rubikon Easy Transfer 跨站脚本漏洞

Rubikon Easy Transfer is a file transfer application developed by Rubikon Corporation. Version 1.7 of Rubikon Easy Transfer contains a cross-site scripting vulnerability. This vulnerability stems from improper input validation of the oldPath, newPath, and path parameters during the creation of...

PT-2026-6202

Name of the Vulnerable Software and Affected Versions Open eClass versions prior to 4.2 Description The Open eClass platform, previously known as GUnet eClass, is a course management system. A broken access control issue permits authenticated students to create new course units, a function...

CVE-2026-24737

creationtimestamp| type| source ---|---|--- 2026-02-02 23:19:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvybqmke62g 2026-02-09 01:02:45+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mefat4pq3c2m 2026-06-09 09:46:01+00:00| seen|...

CVE-2025-6592 Creating a permanent account from a temporary account associates temp username and IP address with real username in AbuseLog

Vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/auth/AuthManager.Php. This issue affects AbuseFilter: from fe0b1cb9e9691faf4d8d9bd80646589f6ec37615 before 1.43.2, 1.44.0...

CVE-2025-6592

CVE-2025-6592 affects Wikimedia Foundation AbuseFilter, specifically the AuthManager.php component. The issue impacts AbuseFilter versions prior to 1.43.2 and 1.44.0. Red Hat, Debian, and OSV records corroborate the vulnerability in AbuseFilter/AuthManager.php and reference affected versions. Sny...

CI4MS Vulnerable to Remote Code Execution (RCE) via Arbitrary File Creation and Save in File Editor

Summary A critical vulnerability has been identified in CI4MS that allows an authenticated user with file editor permissions to achieve Remote Code Execution RCE. By leveraging the file creation and save endpoints, an attacker can upload and execute arbitrary PHP code on the server. Vulnerability...

GHSA-GP56-F67F-M4PX CI4MS Vulnerable to Remote Code Execution (RCE) via Arbitrary File Creation and Save in File Editor

Summary A critical vulnerability has been identified in CI4MS that allows an authenticated user with file editor permissions to achieve Remote Code Execution RCE. By leveraging the file creation and save endpoints, an attacker can upload and execute arbitrary PHP code on the server. Vulnerability...

GHSA-M7J5-R2P5-C39R picklescan vulnerable to arbitrary file create using logging.FileHandler

Summary Unsafe pickle deserialization allows unauthenticated attackers to perform Arbitrary File Creation. By chaining the logging.FileHandler class, an attacker can bypass RCE-focused blocklists to create empty files on the server. The vulnerability allows creating zero-byte files in arbitrary...

picklescan vulnerable to arbitrary file create using logging.FileHandler

Summary Unsafe pickle deserialization allows unauthenticated attackers to perform Arbitrary File Creation. By chaining the logging.FileHandler class, an attacker can bypass RCE-focused blocklists to create empty files on the server. The vulnerability allows creating zero-byte files in arbitrary...

CVE-2026-22224

creationtimestamp| type| source ---|---|--- 2026-02-02 19:21:16+00:00| seen| Telegram/l5GdkV3EN00CMaI5xyso-xNuPLT0g7uF7hgOrEpSdA-D9FY...

CVE-2026-22223

creationtimestamp| type| source ---|---|--- 2026-02-02 19:21:16+00:00| seen| Telegram/l5GdkV3EN00CMaI5xyso-xNuPLT0g7uF7hgOrEpSdA-D9FY...

CVE-2026-22226

creationtimestamp| type| source ---|---|--- 2026-02-02 19:21:16+00:00| seen| Telegram/l5GdkV3EN00CMaI5xyso-xNuPLT0g7uF7hgOrEpSdA-D9FY 2026-07-16 19:00:27+00:00| seen| Telegram/wihZfhaQT2qHw0wLZ8sk5tSU7nS9hHHdvUYjPR1ZKZ5oBq0 2026-07-17 00:00:44+00:00| seen|...

CVE-2026-22225

creationtimestamp| type| source ---|---|--- 2026-02-02 19:21:16+00:00| seen| Telegram/l5GdkV3EN00CMaI5xyso-xNuPLT0g7uF7hgOrEpSdA-D9FY...

CVE-2026-25228

creationtimestamp| type| source ---|---|--- 2026-02-02 17:40:26+00:00| published-proof-of-concept| https://github.com/SignalK/signalk-server/security/advisories/GHSA-vrhw-v2hw-jffx 2026-02-03 16:40:06+00:00| seen| https://gist.github.com/alon710/065ebcce877f52bfe48413cb26322f59...

CVE-2025-47359

creationtimestamp| type| source ---|---|--- 2026-02-02 16:59:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvd2bdm7p23 2026-02-02 17:00:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvd2zbtg224...

CVE-2025-8587

creationtimestamp| type| source ---|---|--- 2026-02-02 13:17:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mduwmu4mju2r...

CVE-2026-23795

creationtimestamp| type| source ---|---|--- 2026-02-02 13:04:20+00:00| seen| https://seclists.org/oss-sec/2026/q1/139 2026-02-02 15:09:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mdv4vpjtvm2s...

CVE-2026-23028

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix kvmdevice leak in kvmipidestroy In kvmioctlcreatedevice, kvmdevice has allocated memory, kvmdevice-destroy seems to be supposed to free its kvmdevice struct, but kvmipidestroy is not currently doing this, that...

CVE-2020-27211

creationtimestamp| type| source ---|---|--- 2026-02-02 08:10:50+00:00| seen| https://gist.github.com/alon710/e0640bf72e038a3aae6ac5430f90d727...

CVE-2026-25201

creationtimestamp| type| source ---|---|--- 2026-02-02 05:24:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdu45yaayh2o 2026-02-02 05:24:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdu4772n7d2h 2026-02-02 09:39:58+00:00| seen|...