32999 matches found
EUVD-2026-51665
sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2.1, sigstore-go does not check a bundle signing timestamp against the validity window of an ExpiringKey wrapping a self-managed long-lived signing key without a certificate, which can allow an attacker holding expired...
EUVD-2026-51027
An unauthenticated remote attacker can inject malicious input into the ModbusServer application because it does not validate the input it fetches from MQTT. This may lead to integrity and availability loss...
EUVD-2025-210558
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /printmembershipcard.php?id=1...
EUVD-2026-50083
goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, the httpserver/handler.go sendFile handler opened files using a cleaned path but derived the authorization filename from raw req.URL.Path, so a trailing slash could bypass .goshs ACL-file protection...
EUVD-2026-50082
goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, the httpserver/updown.go multipart upload handler split part.FileName on / but did not reject .., allowing an unauthenticated upload with filename .. to create a file outside the served tree. This...
EUVD-2026-49907
pytonapi is a Python SDK for TONAPI that provides REST API, streaming, and webhook access to the TON blockchain. From 2.0.0 to 2.2.0, TonapiWebhookDispatcher fails to validate the Authorization header when a webhook handler is registered with the documented path argument, because setup stores...
EUVD-2026-47897
Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension - Custom query URLs could access internal or reserved network services...
EUVD-2026-46406
Tanium addressed an information disclosure vulnerability in Connect...
EUVD-2026-46239
Privilege escalation in the Data Loss Prevention component. This vulnerability was fixed in Firefox 153...
EUVD-2026-46203
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13...
EUVD-2026-45038
A divide-by-zero vulnerability in the Productivity Suite allows a local attacker to cause a division by zero leading to a system crash...
CVE-2026-40957
creationtimestamp| type| source ---|---|--- 2026-07-15 22:00:31+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mqpptv4aip2e...
CVE-2026-33444
creationtimestamp| type| source ---|---|--- 2026-07-15 22:00:25+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mqpptpescz2n...
EUVD-2026-44665
DoS vulnerability in the vibration service. Impact: Successful exploitation of this vulnerability may affect availability...
EUVD-2026-44656
Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
EUVD-2026-44001
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
EUVD-2026-43662
We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6...
EUVD-2026-43268
Successful exploitation of the integer overflow vulnerability could allow an attacker to achieve system-level access to the affected software...