14862 matches found
CVE-2026-84194 LibreNMS 23.10.0 before 26.4.0 OS Command Injection via Hostname
LibreNMS versions = 23.10.0 and getDevice-hostname is concatenated into shell commands ssh, virsh list/dumpxml/domstate in VminfoLibvirt.php and passed to exec without escapeshellarg or argument separation. An authenticated admin can set a crafted device hostname to inject arbitrary OS commands,...
CVE-2026-76957
creationtimestamp| type| source ---|---|--- 2026-09-01 00:01:22+00:00| seen| https://bsky.app/profile/slackers.it/post/3mug4jap4or2n...
PT-2026-84157
LibreNMS versions = 23.10.0 and getDevice-hostname is concatenated into shell commands ssh, virsh list/dumpxml/domstate in VminfoLibvirt.php and passed to exec without escapeshellarg or argument separation. An authenticated admin can set a crafted device hostname to inject arbitrary OS commands,...
CVE-2026-51742
The TOTOLINK T6 wireless dual-band Mesh router (firmware version 4.1.5cu.748_B20211015 ) is vulnerable to an incorrect access control flaw in the discoverWan function. An unauthenticated attacker can exploit this by sending a specially crafted POST request to /cgi-bin/cstecgi.cgi , which triggers...
EUVD-2026-69211
Incorrect access control in the discoverWan function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to trigger WAN discovery logic via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
PT-2026-84203
Incorrect access control in the discoverWan function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to trigger WAN discovery logic via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-51742
Incorrect access control in the discoverWan function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to trigger WAN discovery logic via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-84194: Improper Neutralization of Special Elements used in an OS Command
LibreNMS versions = 23.10.0 and getDevice-hostname is concatenated into shell commands ssh, virsh list/dumpxml/domstate in VminfoLibvirt.php and passed to exec without escapeshellarg or argument separation. An authenticated admin can set a crafted device hostname to inject arbitrary OS commands,...
Important: Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage
A Subscription Management tool for finding and reporting Red Hat product usage Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their...
[SECURITY] Fedora 44 Update: subfinder-2.16.0-1.fc44
Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing...
CVE-2026-42588
A flaw was found in Apache ActiveMQ. An authenticated attacker can exploit an improper input validation vulnerability in the Jolokia JMX-HTTP bridge. By crafting a malicious discovery URI, the attacker can trigger the VM transport's brokerConfig parameter to load a Spring XML application context...
Streamlining Application and API Discovery and Governance
...
CVE-2026-67363
creationtimestamp| type| source ---|---|--- 2026-08-30 21:00:04+00:00| seen| https://t.me/GithubRedTeam/100404 2026-08-31 00:00:08+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100404 2026-09-02 01:00:15+00:00| seen| Telegram/1rxP3qIuireobzlbCghqLtlBEvOO40pQENYobB1-OKe51is...
0day-Rubbish batch-8-2026-08
0day Rubbish 0day vulnerabilities have become rubbish in the AI era. 🌐 Official Website : https://0day-rubbish.com/blog 🎯 Why This Exists Traditional vulnerability disclosure is broken. It's slow, bureaucratic, and ineffective. In the AI era, we can mass-produce 0days at scale—making individual...
SUSE CVE-2026-80186
A stack-based buffer overflow vulnerability exists in BlueZ, the Linux Bluetooth protocol stack. A remote user within Bluetooth radio range can send a specially crafted Extended Inquiry Response EIR packet that causes a buffer overflow when the target device performs Bluetooth discovery. This...
CVE-2026-82450
creationtimestamp| type| source ---|---|--- 2026-08-29 15:02:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mua5hnvon526 2026-08-30 12:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mucdqkql7l25 2026-09-01 11:14:48+00:00| seen|...
Improper Input Validation
github.com/free5gc/free5gc is vulnerable to improper input validation. The vulnerability is due to insufficient validation of NF Profile data, which allows an attacker with SBI access to submit malicious profiles containing attacker-controlled network-function endpoints, causing them to be...
CVE-2026-59313
creationtimestamp| type| source ---|---|--- 2026-08-28 23:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu6hovg3sk2b...
CVE-2026-55068
free5GC is an open-source implementation of the 5G core network. In 4.2.2 and earlier, the NRF RegisterNFInstance handler at PUT /nnrf-nfm/v1/nf-instances/nfInstanceID accepts NF Profiles without enforcing UUID format, nfStatus enum values, heartBeatTimer ranges, mandatory profile fields, or...