12730 matches found
CVE-2026-52905
CVE-2026-52905 (Linux kernel) involves the DAMON subsystem where the min_region_sz value was not guaranteed to be a power of two, potentially allowing unaligned DAMON region address ranges via damon_start(). The issue originated from code in mm/damon/core and was partially addressed previously, b...
USN-8410-1 node-shell-quote vulnerability
Akshat Sinha discovered that shell-quote improperly validated object-token inputs. An attacker could possibly use this issue to cause shell-quote to crash, resulting in a denial of service, or execute arbitrary code...
When Discovery Outpaces Remediation: Modeling AI-Accelerated Vulnerability Discovery in Interconnected Systems
Advanced AI systems for code analysis, binary analysis, fuzzing orchestration, and penetration-test planningmay significantly increase the rate at which latent vulnerabilities are discovered. While improved discovery can benefit defenders, it can also overload remediation pipelines and accelerate...
PT-2026-47879
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A race condition occurs in the Function Discovery Service fdwsd.dll due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges...
PT-2026-48163
Shenzhen Kangda Xin Intelligent Network Technology Company's router, model DR300, version 2.1.2.121, contains hardcoded login credentials and has telnet enabled by default on WAN and LAN interfaces. These vulnerabilities allow attackers to read and write to memory, modify firmware stored in flash...
Microsoft Function Discovery Service (fdwsd.dll) 竞争条件问题漏洞
The Microsoft Function Discovery Service is a background service provided by Microsoft Corporation. There are competition-related vulnerabilities in the Microsoft Function Discovery Service fdwsd.dll. The following products and versions are affected: Windows 11 Version 26H1 for ARM64-based System...
CVE-2026-46443
creationtimestamp| type| source ---|---|--- 2026-06-08 17:07:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mns6aiwzkq23...
Critical Zcash Vulnerability Found and Fixed
If you're a user--owner?--of this cryptocurrency, this is important: On May 29, the security researcher Taylor Hornby found a critical vulnerability in Zcash Orchard privacy pool using Claude Opus 4.8. The Zcash team hired Hornby specifically to look for this kind of issue. He found one fast enou...
CVE-2026-8833
creationtimestamp| type| source ---|---|--- 2026-06-08 15:34:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnryyz3vhh2o...
CVE-2026-9549
Stored cross-site scripting in the service discovery active check output in Checkmk 2.5.0p5, 2.4.0p31, 2.3.0p48, and all 2.2.0 versions allows an administrator who can configure active or custom checks to inject malicious HTML or JavaScript into check output that executes in the browser of an adm...
UBUNTU-CVE-2026-9549
Stored cross-site scripting in the service discovery active check output in Checkmk 2.5.0p5, 2.4.0p31, 2.3.0p48, and all 2.2.0 versions allows an administrator who can configure active or custom checks to inject malicious HTML or JavaScript into check output that executes in the browser of an adm...
WordPress Knit Pay plugin <= 9.4.0.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Averon Averenkov in WordPress Plugin Knit Pay versions = 9.4.0.0...
CVE-2026-9549 Fix XSS in service discovery active check output
Stored cross-site scripting in the service discovery active check output in Checkmk 2.5.0p5, 2.4.0p31, 2.3.0p48, and all 2.2.0 versions allows an administrator who can configure active or custom checks to inject malicious HTML or JavaScript into check output that executes in the browser of an adm...
CVE-2026-9549
Stored cross-site scripting in the service discovery active check output in Checkmk 2.5.0p5, 2.4.0p31, 2.3.0p48, and all 2.2.0 versions allows an administrator who can configure active or custom checks to inject malicious HTML or JavaScript into check output that executes in the browser of an adm...
CVE-2026-9549 Fix XSS in service discovery active check output
Stored cross-site scripting in the service discovery active check output in Checkmk 2.5.0p5, 2.4.0p31, 2.3.0p48, and all 2.2.0 versions allows an administrator who can configure active or custom checks to inject malicious HTML or JavaScript into check output that executes in the browser of an adm...
CVE-2026-9549
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2026-9549 Fix XSS in service discovery active check output
Stored cross-site scripting in the service discovery active check output in Checkmk 2.5.0p5, 2.4.0p31, 2.3.0p48, and all 2.2.0 versions allows an administrator who can configure active or custom checks to inject malicious HTML or JavaScript into check output that executes in the browser of an adm...
EUVD-2026-35054
Stored cross-site scripting in the service discovery active check output in Checkmk 2.5.0p5, 2.4.0p31, 2.3.0p48, and all 2.2.0 versions allows an administrator who can configure active or custom checks to inject malicious HTML or JavaScript into check output that executes in the browser of an adm...
