EUVD-2026-84040

Dell Command | Intel vPro Out of Band, versions prior to 4.7.2, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure...

CVE-2026-82163

Dell Command | Intel vPro Out of Band , versions prior to 4.7.2 , contains an Incorrect Default Permissions vulnerability. A low-privileged attacker with local access can exploit this to achieve Information Disclosure . The CVSS 3.1 base score is 5.5 (MEDIUM) with a local attack vector, low compl...

CVE-2026-82163

Dell Command | Intel vPro Out of Band, versions prior to 4.7.2, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure...

CVE-2026-82163

Dell Command | Intel vPro Out of Band, versions prior to 4.7.2, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure...

CVE-2026-94372

MISP contains a stored cross-site scripting XSS vulnerability in the default theme's Galaxies index page. When a MISP instance detects unknown custom or default galaxy clusters during synchronization, it renders sample tag names in an informational notice directed at site administrators. In the...

CVE-2026-94372

MISP versions below 2.5.47 contain a stored cross-site scripting (XSS) vulnerability in the default theme's Galaxies index page . When the instance detects unknown galaxy clusters during synchronization, it renders sample tag names in an informational notice to site administrators. In the default...

CVE-2026-94372 Stored Cross-Site Scripting via Unescaped Galaxy Cluster Tag Names in MISP Default Theme Galaxies Index

MISP contains a stored cross-site scripting XSS vulnerability in the default theme's Galaxies index page. When a MISP instance detects unknown custom or default galaxy clusters during synchronization, it renders sample tag names in an informational notice directed at site administrators. In the...

CVE-2026-94372: Improper Neutralization of Input During Web Page Generation

MISP contains a stored cross-site scripting XSS vulnerability in the default theme's Galaxies index page. When a MISP instance detects unknown custom or default galaxy clusters during synchronization, it renders sample tag names in an informational notice directed at site administrators. In the...

CVE-2026-82165: Incorrect Default Permissions

Dell Command | Integration Suite for System Center, versions prior to 6.7.2, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure...

CVE-2026-82163: Incorrect Default Permissions

Dell Command | Intel vPro Out of Band, versions prior to 4.7.2, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure...

PT-2026-96090

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.5.47 Description A stored cross-site scripting XSS issue exists in the default theme's Galaxies index page. During synchronization, when unknown custom or default galaxy clusters are detected, the system displays sampl...

EUVD-2026-83740

Incorrect default permissions in the installation directory of WatchDog Anti-Virus on Windows allow local, low-privileged users to modify, replace, or delete antivirus binaries and configuration files, because the installer grants the Users group Full Control over C:\Program Files x86\Watchdog...

CVE-2026-94055

Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free...

CVE-2026-94055

Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free...

CLEANSTART-2026-ZE25949 flaw was found in the default-groups REST endpoint and realm representation of Keycloak

Security vulnerability affects the keycloak package. A flaw was found in the default-groups REST endpoint and realm representation of Keycloak...

CVE-2026-93338

Grandstream GWN7660ELR before firmware version 1.0.27.6 contains an information disclosure vulnerability that allows unauthenticated remote attackers to obtain sensitive system information by querying the SNMP v2c service configured with the default community string 'public'. Attackers can query...

CVE-2026-93338 Grandstream GWN7660ELR < 1.0.27.6 Information Disclosure via SNMP Default Community String

Grandstream GWN7660ELR before firmware version 1.0.27.6 contains an information disclosure vulnerability that allows unauthenticated remote attackers to obtain sensitive system information by querying the SNMP v2c service configured with the default community string 'public'. Attackers can query...

EUVD-2026-83052

Grandstream GWN7660ELR before firmware version 1.0.27.6 contains an information disclosure vulnerability that allows unauthenticated remote attackers to obtain sensitive system information by querying the SNMP v2c service configured with the default community string 'public'. Attackers can query...

CVE-2026-75031

In the interchange/interchange project, a critical remote code execution RCE vulnerability was found in the “quick question” admin feature. In default installations arbitrary Perl code can be injected and executed server-side by unauthenticated users. The Perl code normally runs within a Safe...

Magnohost-Vulnerabilities-pentest

MagnoHost 渗透测试 对 MagnoHost 托管提供商及 MeteorCloud 基础设施的渗透测试。发现：6 台服务器上 MariaDB 暴露（CVSS 9.8），OmniDialer 默认凭据导致完全访问，Wings CVE-2024-27102（9.9），Grafana 暴露，DMARC 欺骗。仅使用 curlcffi + Python。零自动化扫描器。 目标信息...