72615 matches found
CVE-2026-7517
creationtimestamp| type| source ---|---|--- 2026-07-01 17:10:28+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mplz4clqbz2f...
CVE-2025-15646
creationtimestamp| type| source ---|---|--- 2026-07-01 16:41:36+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mplxiqamll2w 2026-07-02 01:58:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmwmxwxk62o 2026-07-02 06:27:27+00:00| seen|...
CVE-2026-20213
A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PE file...
CVE-2026-24245
creationtimestamp| type| source ---|---|--- 2026-07-01 16:21:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mplwf2i7xe26 2026-07-02 04:27:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn6woaywm2k...
CVE-2026-34111 Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speechmac_text.php
Guardian language-system passes the id GET parameter directly into a PHP exec call in speechmactext.php line 18 without sanitization: exec"php jobs/speechaudiomactext.php ".$loginsession." ".$GET'id'." ...". No authentication is required. An unauthenticated remote attacker can append shell...
CVE-2026-58027
creationtimestamp| type| source ---|---|--- 2026-07-01 16:14:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mplvyeiqtn2t 2026-07-02 04:28:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn6yv7vvy2d 2026-07-02 06:32:38+00:00| seen|...
CVE-2026-34102 Guardian Language-System SQL Injection via id Parameter in job_info_get.php
Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in jobinfoget.php line 16: SELECT FROM jobs where input1 = '".$GET'id'."'. An authenticated attacker can perform error-based SQL injection to extract database contents...
CVE-2026-34100 Guardian Language-System SQL Injection via id Parameter in media.php
Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in media.php line 17: SELECT id, filename, extension, type, duration, owner, private FROM files where id = '".$GET'id'."'. An authenticated attacker can perform error-based SQL injection to extract...
CVE-2026-34098 Guardian Language-System XSS via id Parameter in media.php
Guardian language-system fails to sanitize the id GET parameter before inserting it into HTML source and form action attributes in media.php lines 119, 129. An authenticated attacker can craft a URL that injects script tags executing in the victim's browser session...
CVE-2026-34097 Guardian Language-System XSS via id Parameter in text_file.php
Guardian language-system fails to sanitize the id GET parameter before inserting it into multiple HTML form action attributes in textfile.php lines 94, 101, 323, 403, 826, 852. An authenticated attacker can craft a URL that injects script tags executing in the victim's browser session...
CVE-2026-7532
creationtimestamp| type| source ---|---|--- 2026-07-01 16:00:17+00:00| seen| https://infosec.place/objects/c22b899e-0722-43cb-ba3c-e0f141edd0ce...
CVE-2026-24266
creationtimestamp| type| source ---|---|--- 2026-07-01 15:56:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpluxjpby625 2026-07-02 02:49:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmzhkzzk62t 2026-07-02 04:30:14+00:00| seen|...
ECHO-78AB-ABB4-1338
Bulletin has no description...
ECHO-BD8F-1608-878C
Bulletin has no description...
ECHO-61AD-EA61-4AFD
Bulletin has no description...
ECHO-B68D-9E8D-8324
Bulletin has no description...
ECHO-D8DE-1556-967B
Bulletin has no description...
ECHO-14E4-FD41-7183
Bulletin has no description...