867 matches found
CVE-2026-74586
CVE-2026-74586 — SCTP ASCONF newtransport use-after-free trigger A self-contained, unprivileged PoC for CVE-2026-74586, a use-after-free in the Linux kernel's SCTP ASCONF dynamic address reconfiguration handling. Credit for the bug itself goes to Qing Ming, who reported it upstream; the fix is...
PT-2026-134900
Name of the Vulnerable Software and Affected Versions WAVLINK WN701AE version M01AE V260105 Description The ioos Web Backend component contains a flaw in the del staticrule function within the static route setting.sh file. A remote attacker can execute arbitrary operating system commands by...
CVE-2026-64564
CVE-2026-64564 — SCTPhantom: Linux SCTP ASCONF DEL-IP UAF Local Privilege Escalation HackSpeak distribution repository. This repository is a distribution mirror of a community-public PoC; the code is identical to upstream. ⚠️ Upstream provides no LICENSE and no author information; this PoC is...
CVE-2026-64564
Debian 13 6.12.95 SCTP ASCONF DEL-IP UAF proof of concept. gcc -O2 -static -o lpe lpedebian.6.12.95.c ./lpe...
CVE-2026-119651
HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in FeedController.delFeed that allows authenticated users to delete other users' moments by supplying arbitrary feedId values. Attackers can send POST requests to /feed/del with another user's feedId to delete...
CVE-2026-119644
Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated non-readonly users to modify other users' pictures by supplying arbitrary picture ids. Attackers can call the picture delete, /picture/del/batch, or /picture/star endpoints to permanently delete victim...
CVE-2026-119651 HuLa-Server through 3.0.7 IDOR via /feed/del Moment Deletion
HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in FeedController.delFeed that allows authenticated users to delete other users' moments by supplying arbitrary feedId values. Attackers can send POST requests to /feed/del with another user's feedId to delete...
CVE-2026-119651 HuLa-Server through 3.0.7 IDOR via /feed/del Moment Deletion
HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in FeedController.delFeed that allows authenticated users to delete other users' moments by supplying arbitrary feedId values. Attackers can send POST requests to /feed/del with another user's feedId to delete...
EUVD-2026-114067
HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in FeedController.delFeed that allows authenticated users to delete other users' moments by supplying arbitrary feedId values. Attackers can send POST requests to /feed/del with another user's feedId to delete...
CVE-2026-119651
HuLa-Server versions through 3.0.7 is vulnerable to an Insecure Direct Object Reference (IDOR) in the FeedController.delFeed component. This flaw allows authenticated users to delete moments belonging to other users by providing arbitrary feedId values via POST requests to the /feed/del endpoint....
CVE-2026-119644 Blossom through 1.17.1 Authorization Bypass via Picture Delete and Star Endpoints
Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated non-readonly users to modify other users' pictures by supplying arbitrary picture ids. Attackers can call the picture delete, /picture/del/batch, or /picture/star endpoints to permanently delete victim...
CVE-2026-119644
The Blossom application (through version 1.17.1 ) is vulnerable to an authorization bypass (CWE-639) that permits authenticated non-readonly users to modify pictures belonging to other users. By providing arbitrary picture IDs, an attacker can access the picture delete , /picture/del/batch , or /...
EUVD-2026-114060
Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated non-readonly users to modify other users' pictures by supplying arbitrary picture ids. Attackers can call the picture delete, /picture/del/batch, or /picture/star endpoints to permanently delete victim...
CVE-2026-119644 Blossom through 1.17.1 Authorization Bypass via Picture Delete and Star Endpoints
Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated non-readonly users to modify other users' pictures by supplying arbitrary picture ids. Attackers can call the picture delete, /picture/del/batch, or /picture/star endpoints to permanently delete victim...
CVE-2026-119651: HuLaSpark HuLa-Server: HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in FeedController.delFeed that…
HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in FeedController.delFeed that allows authenticated users to delete other users' moments by supplying arbitrary feedId values. Attackers can send POST requests to /feed/del with another user's feedId to delete...
PT-2026-133581
HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in FeedController.delFeed that allows authenticated users to delete other users' moments by supplying arbitrary feedId values. Attackers can send POST requests to /feed/del with another user's feedId to delete...
CVE-2026-119644: blossom-editor Blossom: Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated non-readonly users to…
Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated non-readonly users to modify other users' pictures by supplying arbitrary picture ids. Attackers can call the picture delete, /picture/del/batch, or /picture/star endpoints to permanently delete victim...
PT-2026-133574
Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated non-readonly users to modify other users' pictures by supplying arbitrary picture ids. Attackers can call the picture delete, /picture/del/batch, or /picture/star endpoints to permanently delete victim...
CVE-2026-116485
The danmu_api software (versions prior to 1.21.7 ) is vulnerable to an authentication bypass that allows unauthenticated attackers to modify server environment configurations. This occurs when the application uses the default TOKEN and the ADMIN_TOKEN is unset. By sending POST requests to endpoin...
EUVD-2026-109812
danmuapi before 1.21.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to modify server environment configuration when the default TOKEN is used and ADMINTOKEN is unset. Attackers can send POST requests to /api/env/set, /api/env/add, or /api/env/del to set...