6928 matches found
EUVD-2026-58735
A vulnerability was identified in TOTOLINK A800R 4.1.2cu.5137B20200730. This impacts the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. The manipulation of the argument url leads to stack-based buffer overflow. The attack can be initiated remotely. The...
CVE-2026-68820
creationtimestamp| type| source ---|---|--- 2026-08-11 18:00:24+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/98bf8749-f824-4eeb-982e-7eb87d11e75a 2026-08-11 18:18:05+00:00| seen| https://bsky.app/profile/suriq.io/post/3mst7yyfsko2o 2026-08-11...
Inside the Metabase SQLi: Exploited in the Wild
Reverse engineering Metabase CVE-2026-72898 with AI to accelerate defense...
Astra Linux – Vulnerability in qBittTorrent
All versions of the qBittorrent client up to 4.5.5 use default credentials when the web user interface is enabled. Administrators are not forced to change the default credentials. As of 4.5.5, this issue has not been fixed. A remote attacker can use the default credentials to authenticate and...
Photon OS 5.0: Glibc PHSA-2026-5.0-90-0855
An update of the glibc package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0855. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Sudo PHSA-2025-5.0-91-0544
An update of the sudo package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0544. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Telegraf PHSA-2023-5.0-91-0041
An update of the telegraf package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0041. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Sudo PHSA-2025-5.0-92-0544
An update of the sudo package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-92-0544. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Libwebp PHSA-2023-5.0-91-0097
An update of the libwebp package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0097. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Linux PHSA-2024-5.0-91-0206
An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0206. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Apache PHSA-2025-5.0-91-0493
An update of the apache package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0493. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Chromium PHSA-2023-5.0-91-0160
An update of the chromium package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0160. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2026-19352
A vulnerability was determined in mifi lossless-cut up to 3.69.0. Affected by this issue is some unknown functionality of the file src/main/httpServer.ts of the component Built-in HTTP API Service. Executing a manipulation can lead to server-side request forgery. The attack requires access to the...
CVE-2013-3821
creationtimestamp| type| source ---|---|--- 2026-08-07 11:00:20+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b5eb8264-164c-4d3e-b562-e6bfed5d81bd...
CVE-2026-18577: N-able N-central Authentication Bypass Exploited in the Wild
Overview On August 2, 2026, N-able published a security advisory for CVE-2026-18577, an authentication bypass vulnerability affecting N-central that was discovered being exploited in-the-wild after an incomplete fix for an earlier authentication bypass issue, CVE-2026-18556 was disclosed...
CVE-2023-54359
creationtimestamp| type| source ---|---|--- 2026-08-03 11:01:24+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a34d52da-21b0-44bb-93d8-c723648a24f2 2026-08-04 01:00:19+00:00| exploited|...
CVE-2026-3836
creationtimestamp| type| source ---|---|--- 2026-08-02 01:00:32+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cfa22a55-3ac8-46bc-bb9d-e1411808358a...
CVE-2024-37014
creationtimestamp| type| source ---|---|--- 2026-08-01 11:00:22+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/49b08f6f-9f5e-4e73-9c20-98471e002f42 2026-08-04 18:00:08+00:00| confirmed|...
Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added a newly disclosed security flaw impacting Cisco Secure Firewall Management Center FMC Software to its Known Exploited Vulnerabilities KEV catalog, following reports of zero-day exploitation. The vulnerability,...
