145 matches found
CVE-2026-71264
WLED's GET /json/cfg endpoint registered in wled00/wledserver.cpp calls serveJson with no settings-PIN check, unlike the /edit endpoint which explicitly checks correctPIN, disclosing the device's general configuration network, hardware, LED setup to any unauthenticated client on the network...
CVE-2026-56167
creationtimestamp| type| source ---|---|--- 2026-07-25 11:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrhpmyb3gk2m 2026-07-31 00:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrvplolmdu22...
CVE-2026-62561
Oracle E-Business Suite HRMS (US) in versions 12.2.3–12.2.15 (Internal Operations) contains a vulnerability that allows a low-privileged attacker with logon to the infrastructure to compromise Oracle HRMS (US) and potentially take over. CVSSv3.1 base score 7.8 (C:H, I:H, A:H) with Local attack ve...
CVE-2026-62515
...
CVE-2026-61161
The CVE-2026-61161 entry concerns Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Endeca Application Controller), affected in version 11.4.0. The vulnerability is exploitable over HTTP with network access by an unauthenticated attacker, potentially leading to takeover of the a...
CVE-2026-61121
...
CVE-2026-60711
Summary: CVE-2026-60711 affects Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager) with affected versions 22.3–26.5. The issue allows a low-privilege attacker over a network via HTTP to compromise the product, potentially taking over Siebel CRM Cloud Applications; impacts include confide...
MINI-82Q8-7633-9W77
Bulletin has no description...
CVE-2026-46871
...
CVE-2026-46868
Technical details about CVE-2026-46868 are not publicly available in the provided documents. Monitor for updates from Oracle and CVE records.
CVE-2026-49317
The CVE CVE-2026-49317 affects the Infotainment Digital Round on the Indian Scout Bobber + Tech 2025 model year. The vulnerability arises when the boot window relies on Wireless Control Module (WCM) traffic as a proxy for immobilizer presence. If no WCM messages are observed (e.g., by silencing W...
Indian Motorcycle Scout Bobber + Tech 安全漏洞
The Indian Motorcycle Scout Bobber + Tech is a mid-level cruiser motorcycle produced by the Japanese Indian Motorcycle company. The 2025 version of the Indian Motorcycle Scout Bobber + Tech has security vulnerabilities. These vulnerabilities stem from an error in the behavior sequence of the...
CVE-2025-68712
SpSoft AppLock com.sp.protector.free 7.9.40 for Android allows a local attacker with physical access to bypass fingerprint or PIN authentication. Although the app integrates Android's biometric mechanisms, the lock is implemented with a custom overlay that fails to consistently enforce...
Astra Linux – Vulnerability in opensc
A flaw was discovered in OpenSC packages that could allow for a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes when an empty zero-length PIN is passed. This issue poses a security risk, especially for OS...
PIN bypass in PassCodeActivity via back button
None...
EUVD-2026-28547
Weak credentials in the CashDro 3 web administration panel, version 24.01.00.26, where the platform allows the use of numeric PINs for user authentication. The system supports the use of PIN-based credentials, maintaining compatibility with POS software integrations deployed since 2012. This coul...
CVE-2026-34314
...
CVE-2026-22011
The CVE-2026-22011 entry describes a vulnerability in Oracle Applications DBA (ADPatch) within Oracle E-Business Suite, affecting 12.2.3 through 12.2.15. The vulnerability can be exploited by a network-accessible attacker over HTTP and requires user interaction; it enables takeover of Oracle Appl...
Fleet 安全特征问题漏洞
Fleet is an open-source device management platform developed by Fleet Device Management. It supports various operating systems and devices, and helps IT and security teams with device management, vulnerability reporting, MDM operations, etc. Versions of Fleet prior to 4.80.1 contained security...