OctoPrint 1.11.2 - File Upload

Exploit Title: OctoPrint 1.11.2 - File Upload Date: 2025-09-28 Exploit Author: prabhatverma.addada Vendor Homepage: https://octoprint.org Software Link: https://github.com/OctoPrint/OctoPrint Affected Versions: = 1.11.2 Patched Versions: 1.11.3 CVE: CVE-2025-58180 CVSS per advisory: 7.5 Platform:...

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from improper handling of sensors that do not support event detection. This vulnerability may lead to null...

GHSA-GCQQ-FXW6-F866

creationtimestamp| type| source ---|---|--- 2026-02-03 19:22:40+00:00| seen| Telegram/nt-q5yNevYWKqqRy2ZSijClK6WEfDxXAX6mzKiCUgPYppMI...

EUVD-2026-5213

Cross-Site Request Forgery CSRF vulnerability in magepeopleteam WpEvently mage-eventpress allows Cross Site Request Forgery.This issue affects WpEvently: from n/a through = 5.1.1...

CVE-2025-67850

creationtimestamp| type| source ---|---|--- 2026-02-03 13:16:27+00:00| seen| Telegram/fpMcrY2RALMfsN1onUqQsHu7uTJCJuSmLnazyi9cvEQogc...

CVE-2026-1058

creationtimestamp| type| source ---|---|--- 2026-02-03 09:17:08+00:00| seen| Telegram/FqzbYeVrA83bKBXihn9RsWwSkEuF36kvwdGphoUN0o5eRo...

Insertion of Sensitive Information Into Sent Data

Overview mediawiki/core is a Free software wiki application developed by the Wikimedia Foundation and others. Note: This package is not maintained on Packagist anymore, but newer releases exist. Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data...

CVE-2026-20403

creationtimestamp| type| source ---|---|--- 2026-02-03 00:15:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdw3eiudex22...

EUVD-2025-206700

An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 2200, 1330, 1380, 1480, 1580, W920, W930, and W1000. There is unbounded memory allocation in a /proc/driver/unifi0/connlogeventbursttous write operation, leading to kernel...

CVE-2025-58344

An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930 and W1000. There is unbounded memory allocation in a /proc/driver/unifi0/connlogeventbursttous write operation, leading to kernel memory...

CVE-2025-12680

CVE-2025-12680 affects Brocade SANnav prior to version 2.4.0b. In the event of disaster-recovery failover, the standby SANnav server logs database passwords in clear text, enabling a remote authenticated attacker with admin privileges to read the passwords from SANnav logs or the supportsave. The...

CVE-2026-22223

creationtimestamp| type| source ---|---|--- 2026-02-02 19:21:16+00:00| seen| Telegram/l5GdkV3EN00CMaI5xyso-xNuPLT0g7uF7hgOrEpSdA-D9FY...

CVE-2026-0630

creationtimestamp| type| source ---|---|--- 2026-02-02 19:20:36+00:00| seen| Telegram/PNVA6DRRCu6uWOBL3siVeUJTp6kTW4zRfFwbHDecqfFIqhQ...

CVE-2026-24471

The CVE-2026-24471 issue affects Continuwuity and Conduit-derived servers (Continuwuity, Conduit, Grapevine, Tuwunel). A malicious remote server can induce the victim to sign an arbitrary event during user interactions such as leaving a room, joining a room, or knocking on a room, by requesting a...

CVE-2025-47366

creationtimestamp| type| source ---|---|--- 2026-02-02 17:21:06+00:00| seen| Telegram/N4lnT3bQ1VXvzXPAYAVlLYFHvVq2Vng1nuOYegKOFUWHs...

CVE-2026-1761

creationtimestamp| type| source ---|---|--- 2026-02-02 14:19:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdv237qncn23 2026-03-01 14:34:34+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mfyxj4qruk2s...

CVE-2026-1117 Improper Access Control in parisneo/lollms

A vulnerability in the lollmsgenerationevents.py component of parisneo/lollms version 5.9.0 allows unauthenticated access to sensitive Socket.IO events. The addevents function registers event handlers such as generatetext, cancelgeneration, generatemsg, and generatemsgfrom without implementing...

WordPress Happy Addons for Elementor plugin <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Event Calendar Widget vulnerability discovered by stealthcopter in WordPress Plugin Happy Addons for Elementor versions = 3.10.7...

CVE-2026-1531

creationtimestamp| type| source ---|---|--- 2026-02-02 06:21:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdu7evjwrz2o...

ALSA-2026:1690 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: irqchip/gic-v2m use-after-free vulnerability CVE-2025-37819 kernel: RDMA/core: Fix "KASAN: slab-use-after-free Read in ibregisterdevice" problem CVE-2025-38022 kernel: Linux...