28451 matches found
CVE-2026-34792: Improper Neutralization of Special Elements used in an OS Command
Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logsclamav.cgi. The DATE parameter value is used to construct a file path that is passed to a Perl open call, which allows command injection due to an incomplete...
CVE-2026-34791: Improper Neutralization of Special Elements used in an OS Command
Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logsproxy.cgi. The DATE parameter value is used to construct a file path that is passed to a Perl open call, which allows command injection due to an incomplete...
Endian Firewall 操作系统命令注入漏洞
Endian Firewall is a network security firewall system developed by Endian Corporation. Versions of Endian Firewall 3.3.25 and earlier contained a vulnerability related to operating system command injection. This vulnerability stemmed from incomplete regular expression validation of the DATE...
GHSA-R4V5-RWR2-Q7R4
creationtimestamp| type| source ---|---|--- 2026-04-01 23:27:43+00:00| seen| Telegram/9bl7FEfQKeFpZFPlYLUaNlRChLBL7dB3Syrn3BTLiX1da84...
GHSA-VH89-RJPH-2G7P
creationtimestamp| type| source ---|---|--- 2026-04-01 23:26:42+00:00| seen| Telegram/jbWMrWY3kup1vLwq2L3T9QUurzdP-pS58MJjOuG7oT4-o...
CVE-2026-2285
creationtimestamp| type| source ---|---|--- 2026-04-01 23:26:42+00:00| seen| Telegram/jbWMrWY3kup1vLwq2L3T9QUurzdP-pS58MJjOuG7oT4-o...
CVE-2025-58669
creationtimestamp| type| source ---|---|--- 2026-04-01 22:28:06+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3mihqgjumqp2c...
CVE-2026-34567
creationtimestamp| type| source ---|---|--- 2026-04-01 22:05:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihp67z6nt2s 2026-04-01 22:06:50+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-r33w-c82v-x5v7 2026-04-01 23:27:52+00:00| seen|...
CVE-2026-34455
creationtimestamp| type| source ---|---|--- 2026-04-01 20:50:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihkynlnrb2n 2026-04-01 23:26:58+00:00| seen| Telegram/lZIbbZM6hBayBvqPlVKcR-m9kDIyKTvGCXDWINXAPChKhQ...
CVE-2026-34747
creationtimestamp| type| source ---|---|--- 2026-04-01 20:40:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihkgl3e3d2o 2026-04-01 23:27:18+00:00| seen| Telegram/bl6LC3S0UxxO5vDfC3lE4LaBC6ObKrhuhRcx8XqwmK5Cxg 2026-04-02 05:25:38+00:00| seen|...
CVE-2026-22768
creationtimestamp| type| source ---|---|--- 2026-04-01 15:26:09+00:00| seen| Telegram/LPiyqtmOsuMBSJ4TiscGzigzJ0idlnzzivv75bN9d93RTXE 2026-04-01 15:38:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3migzkafryn27 2026-04-01 16:10:13+00:00| seen|...
CVE-2026-0522
creationtimestamp| type| source ---|---|--- 2026-04-01 15:15:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3migyaylncf2s 2026-04-01 15:26:09+00:00| seen| Telegram/LPiyqtmOsuMBSJ4TiscGzigzJ0idlnzzivv75bN9d93RTXE...
CVE-2026-23408
creationtimestamp| type| source ---|---|--- 2026-04-01 11:36:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miglzaietw27 2026-04-02 17:36:56+00:00| seen| Telegram/Mrl-2X1DMgxtaU5XSUN4IbsWrdS8894u2WS0LqzSL2HMbhg 2026-04-07 18:00:00+00:00| seen|...
CVE-2024-53828
creationtimestamp| type| source ---|---|--- 2026-04-01 11:35:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miglxgwxgj2d...
CVE-2026-23410
creationtimestamp| type| source ---|---|--- 2026-04-01 11:20:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3migl4llo3z2q 2026-04-02 17:36:56+00:00| seen| Telegram/Mrl-2X1DMgxtaU5XSUN4IbsWrdS8894u2WS0LqzSL2HMbhg 2026-04-02 17:37:03+00:00| seen|...
SUSE-FU-2026:20990-1 Feature update for himmelblau
This update for himmelblau fixes the following issues: Update to himmelblau 2.3.8 jscPED-14511: Security issues: - CVE-2025-54882: world readable cloud TGT token bsc1247735. - CVE-2025-58160: tracing-subscriber: Tracing log pollution bsc1249013. - CVE-2026-25727: time: parsing of user-provided...
CVE-2025-15484
creationtimestamp| type| source ---|---|--- 2026-04-01 08:21:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3migb4fqpml2d 2026-04-01 14:51:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3migwwfbs252t 2026-04-01 15:20:57+00:00| seen|...
CVE-2026-34725
creationtimestamp| type| source ---|---|--- 2026-04-01 07:49:06+00:00| published-proof-of-concept| https://github.com/dbgate/dbgate/security/advisories/GHSA-35xm-qvjg-8m42 2026-04-02 19:27:20+00:00| published-proof-of-concept| Telegram/zJs9VhJAI5JOvrL4hzeWnrOleMDgHArbbwhOuzjaL80cudA 2026-04-03...