13408 matches found
GO-2026-4756 free5GC NRF Discovery EncodeGroupId Function Panics on Malformed group-id-list Parameter in github.com/free5gc/nrf
free5GC NRF Discovery EncodeGroupId Function Panics on Malformed group-id-list Parameter in github.com/free5gc/nrf...
Introducing the Wiz Red Agent- AI-Powered Attacker
Red Agent is an AI-powered, context-aware attacker that uncovers complex exploitable risks across your entire attack surface, continuously and at scale...
CVE-2026-4647
creationtimestamp| type| source ---|---|--- 2026-03-23 16:05:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhqgttid7e24...
WordPress Sanzo theme < 2.4.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Sanzo versions 2.4.3...
WordPress Boutique theme < 2.4.6 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Boutique versions 2.4.6...
WordPress Contact Manager plugin <= 9.1 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by johska in WordPress Plugin Contact Manager versions = 9.1...
CVE-2026-28809
creationtimestamp| type| source ---|---|--- 2026-03-23 12:38:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhq3c2adwb2e...
WordPress KIDZ theme <= 5.24 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme KIDZ versions = 5.24...
The vulnerability of the ndisc_router_discovery() function in the net/ipv6/ndisc.c module of the IPv6 protocol implementation in the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the ndiscrouterdiscovery function in the net/ipv6/ndisc.c module of the IPv6 protocol implementation in the Linux operating system is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...
DSpace 9.2 REST API Automated Document Discovery and Download
This is a framework for collecting data from DSpace systems. Built using Selenium, it is designed to automatically discover and download documents from web repositories and public portals...
📄 DSpace 7.6.6-next Cross Site Scripting
The Discovery Search REST API in DSpace version 7.6.6-next suffers from a cross site scripting vulnerability. ============================================================================================================================================= | Title : DSpace 7.6.6-next Discovery API...
Exploit for OS Command Injection in Beyondtrust Privileged_Remote_Access
BeyondTrust CVE-2026-1731 PoC Overview A Python-based sec...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Google Android
Bluetooth/BLE Penetration Testing Toolkit for Automotive IVI Sys...
CVE-2026-32045
creationtimestamp| type| source ---|---|--- 2026-03-21 03:10:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhk2mi65ag2e 2026-03-21 06:44:39+00:00| seen| https://bsky.app/profile/printy.margin.cafe/post/3mhkglezkno27 2026-03-22 03:00:05+00:00| seen|...
EUVD-2026-13800
A vulnerability was determined in D-Link DIR-820LW 2.03. Affected is the function ssdpcgimain of the component SSDP. Executing a manipulation can lead to os command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized...
WordPress Feedy theme < 2.1.5 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Phat RiO in WordPress Theme Feedy versions 2.1.5...
CVE-2026-4499
A vulnerability was determined in D-Link DIR-820LW 2.03. Affected is the function ssdpcgimain of the component SSDP. Executing a manipulation can lead to os command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized...
CVE-2026-4499
A vulnerability was determined in D-Link DIR-820LW 2.03. Affected is the function ssdpcgimain of the component SSDP. Executing a manipulation can lead to os command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized...
CVE-2026-4499
CVE-2026-4499 affects D-Link DIR-820LW firmware 2.03. The vulnerability targets the SSDP component’s ssdpcgi_main function, where manipulation can lead to an OS command injection. The issue can be exploited remotely over the network, and public disclosures indicate an exploit exists. Connections ...