28452 matches found
CVE-2026-27417 WordPress Sweet Date theme < 4.0.1 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in SeventhQueen Sweet Date sweetdate allows Object Injection.This issue affects Sweet Date: from n/a through 4.0.1...
CVE-2026-27417
CVE-2026-27417 describes a Deserialization of Untrusted Data vulnerability in the SeventhQueen Sweet Date (sweetdate) WordPress theme, enabling PHP Object Injection prior to version 4.0.1. Connected sources (Red Hat and CVE records) confirm the issue affects Sweet Date
EUVD-2026-9514
International Data Casting IDC SFX2100 satellite receiver comes with the /bin/date utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file...
CVE-2017-12630
creationtimestamp| type| source ---|---|--- 2026-03-05 02:40:03+00:00| seen| https://gist.github.com/aamixsh/3d5e1cb8dc17415acad151adc9c11e61...
CVE-2026-29122
International Data Casting IDC SFX2100 satellite receiver comes with the /bin/date utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file...
CVE-2026-29122 `/bin/date` Binary given SETUID Permissions on IDC SFX2100 Leading to Potential LPE
International Data Casting IDC SFX2100 satellite receiver comes with the /bin/date utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file...
CVE-2026-29122 `/bin/date` Binary given SETUID Permissions on IDC SFX2100 Leading to Potential LPE
International Data Casting IDC SFX2100 satellite receiver comes with the /bin/date utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file...
CVE-2026-29122
International Data Casting IDC SFX2100 satellite receiver comes with the /bin/date utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file...
CVE-2026-29122
IDC SFX2100 ships with /bin/date with setuid, enabling local user to perform privileged reads as root. The vulnerability arises from a setuid binary in the local filesystem, allowing bypass of normal permissions and exposure of sensitive files (e.g., /etc/shadow). Impact is described as high conf...
GHSA-WF45-3GPW-VRQV
creationtimestamp| type| source ---|---|--- 2026-03-05 00:10:05+00:00| seen| https://gist.github.com/alon710/ae14f3ab86f97e851dfebe5b270a8a84...
CVE-2026-30225
creationtimestamp| type| source ---|---|--- 2026-03-05 00:05:57+00:00| published-proof-of-concept| https://github.com/OliveTin/OliveTin/security/advisories/GHSA-p443-p7w5-2f7f 2026-03-06 23:09:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mggglydu5f2n 2026-09-09 05:00:05+00:00|...
International Datacasting SFX2100 SuperFlex Satellite Receiver 安全漏洞
The International Datacasting SFX2100 SuperFlex Satellite Receiver is a professional broadcast-grade satellite signal receiving device from the International Datacasting company. The SFX2100 SuperFlex Satellite Receiver has a security vulnerability, which stems from the setuid bit being set for t...
PT-2026-23099
Name of the Vulnerable Software and Affected Versions IDC SFX2100 satellite receiver affected versions not specified Description The IDC SFX2100 satellite receiver includes the /bin/date utility installed with the setuid bit set. This configuration allows any local user who can execute the binary...
CVE-2026-27417: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in SeventhQueen Sweet Date sweetdate allows Object Injection.This issue affects Sweet Date: from n/a through 4.0.1...
WordPress plugin Sweet Date 代码问题漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
CVE-2026-29122: Improper Privilege Management
International Data Casting IDC SFX2100 satellite receiver comes with the /bin/date utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file...
CVE-2026-20025
creationtimestamp| type| source ---|---|--- 2026-03-04 20:19:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgb46b643j2v...
CVE-2026-28435
creationtimestamp| type| source ---|---|--- 2026-03-04 20:18:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgb44kqejo25 2026-03-06 00:00:16+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mgdyyifisu2u 2026-03-20 11:11:34+00:00| seen|...