Linux Distros Unpatched Vulnerability : CVE-2026-41415

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, there is an out-of-bounds read when parsing a malformed...

Microsoft Entra Agent ID Flaw Enabled Tenant Takeover via Privilege Escalation

Microsoft Entra Agent ID flaw allowed privilege escalation and tenant takeover via Service Principal abuse, now fully patched by Microsoft...

denuOwO-hypervisor-vulnerabilities

DenuOwO SVM/VMX Hypervisor — 6 Vulnerabilities PoC + Analysis...

CVE-2026-43983

creationtimestamp| type| source ---|---|--- 2026-04-26 17:45:52+00:00| published-proof-of-concept| https://github.com/pocket-id/pocket-id/security/advisories/GHSA-w6p7-2fxx-4f44 2026-07-28 16:35:14+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-w6p7-2fxx-4f44...

EUVD-2018-21817

Wansview 1.0.2 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying oversized input strings. Attackers can inject 2000-byte payloads into the Camera name and DID number fields during camera addition to trigger application crashes...

CVE-2018-25275 Faleemi Plus 1.0.2 Denial of Service via Buffer Overflow

Faleemi Plus 1.0.2 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying oversized input strings. Attackers can paste a 2000-byte payload into the Camera name and DID number fields during camera addition to trigger an application crash...

CVE-2018-25275

CVE-2018-25275 affects Faleemi Plus 1.0.2 and describes a local buffer overflow that can crash the application. A 2000-byte payload pasted into the Camera name and DID number fields during camera addition is reported to trigger the crash. The connected records confirm the vulnerability and its lo...

CVE-2026-7028

VULNERABILITY: CVE-2026-7028 affects CodeAstro Online Job Portal 1.0. An SQL injection is possible in the All Jobs Page via manipulation of the ID argument in /admin/jobs-admins/delete-jobs.php. Exploitation is remote and publicly released; impact is limited to low confidentiality/integrity/avail...

CVE-2026-7068

creationtimestamp| type| source ---|---|--- 2026-04-26 08:09:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116469985821024174 2026-04-27 00:21:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkgsgupivh2l 2026-04-27 14:44:12+00:00| published-proof-of-concep...

CVE-2026-42255

Technitium DNS Server before 15.0 allows DNS traffic amplification via cyclic name server delegation...

CodeAstro Online Job Portal 注入漏洞

CodeAstro Online Job Portal is an online job portal operated by CodeAstro Corporation. Version 1.0 of CodeAstro Online Job Portal has a vulnerability due to improper handling of ID parameters in the admin/jobs-admins/delete-jobs.php file within the All Jobs Page component, which may lead to SQL...

Wansview 安全漏洞

Wansview is a series of video monitoring cameras designed for home and small-scale scenarios by Wansview Company. https://www.wansview.com/. Version 1.0.2 of Wansview contains a security vulnerability; this vulnerability arises from attackers being able to cause the application to crash by...

Fedora 45 : live555 / vlc (2026-56c8fe41c8)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-56c8fe41c8 advisory. Latest upstream release. Adds protection against the use of a 'stolen' authenticated RTSP session id to send RTSP server's PLAY, PAUSE, TEARDOWN, and...

CVE-2026-4082

creationtimestamp| type| source ---|---|--- 2026-04-25 23:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mke7attvgd2g...

CVE-2026-7002

A vulnerability was determined in KLiK SocialMediaWebsite up to 1.0.1. This vulnerability affects unknown code of the file /includes/getmessageajax.php of the component Private Message Handler. Executing a manipulation of the argument cid can lead to sql injection. It is possible to launch the...

CVE-2026-23541

creationtimestamp| type| source ---|---|--- 2026-04-25 21:03:15+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mkdwukrhzx2t...

CVE-2026-4280

creationtimestamp| type| source ---|---|--- 2026-04-25 18:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkdoigax452s...

GHSA-6FW5-F8R9-FGFM

creationtimestamp| type| source ---|---|--- 2026-04-25 11:36:33+00:00| seen| https://gist.github.com/dims/bd766118ae32d646ea9f127ac51c3054...

OESA-2026-2023 openjpeg2 security update

OpenJPEG is an open-source JPEG 2000 codec written in C language. It has been developed in order to promote the use of JPEG 2000, a still-image compression standard from the Joint Photographic Experts Group JPEG. Since April 2015, it is officially recognized by ISO/IEC and ITU-T as a JPEG 2000...

OESA-2026-1996 sudo security update

Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow people to get their work done. Security Fixes: In Sudo through 1.9.17p2 before 3e474c2, a failure of a setui...