10209 matches found
The vulnerability affects the embedded energy-independent single-write eFUSE memory module in Realtek RTL8762C, a highly integrated wireless system on chip (SoC). This module allows a hacker to circumvent existing security restrictions and expose sensitive information.
The vulnerability of the embedded energy-independent single-write eFUSE memory in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to the fact that power is turned on before the access control mechanism is activated. Exploiting this vulnerability can allow a hacker to...
CVE-2026-16686
creationtimestamp| type| source ---|---|--- 2026-08-23 20:37:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtrnen4qmm23...
CVE-2026-75922
creationtimestamp| type| source ---|---|--- 2026-08-23 18:54:48+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/a2qowb4i2bolr 2026-08-23 20:06:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gqak3r26wcsli...
CVE-2026-8445
creationtimestamp| type| source ---|---|--- 2026-08-23 14:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtqzg74ap52e 2026-08-23 15:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtr2lf3rar26 2026-08-23 16:06:39+00:00| seen|...
Redash Setup Configuration - Default Secrets Disclosure
Redash Setup Configuration is vulnerable to default secrets disclosure Insecure Default Initialization of Resource. If an admin sets up Redash versions =10.0 and prior without explicitly specifying the REDASHCOOKIESECRET or REDASHSECRETKEY environment variables, a default value is used for both...
Alt-n/MDaemon Security Gateway <=8.5.0 - XML Injection
Alt-n/MDaemon Security Gateway through 8.5.0 is susceptible to XML injection via SecurityGateway.dll?view=login. An attacker can inject an arbitrary XML argument by adding a new parameter in the HTTP request URL. As a result, the XML parser fails the validation process and discloses information...
PHPIPAM <v1.5.1 - Missing Authorization
In phpIPAM 1.5.1, an unauthenticated user could download the list of high-usage IP subnets that contains sensitive information such as a subnet description, IP ranges, and usage rates via findfullsubnets.php endpoint. The bug lies in the fact that findfullsubnets.php does not verify if the user i...
Argo CD Unauthenticated Access to sensitive setting
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. The vulnerability allows unauthorized access to the sensitive settings exposed by /api/v1/settings endpoint without authentication. All sensitive settings are hidden except passwordPattern. id: CVE-2024-37152 info: name: Ar...
Cisco Smart Licensing Utility UnAuthenticated Logs Exposure Leaking Plaintext Credentials
A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive information.This vulnerability is due to excessive verbosity in a debug log file. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected...
Electrolink FM/DAB/TV Transmitter (controlloLogin.js) - Credentials Disclosure
Electrolink transmitters store credentials in clear-text. Use of these credentials could allow an attacker to access the system. id: CVE-2024-3742 info: name: Electrolink FM/DAB/TV Transmitter controlloLogin.js - Credentials Disclosure author: Farish severity: high description: | Electrolink...
MicroStrategy Library <11.1.3 - Cross-Site Scripting
MicroStrategy Library before 11.1.3 contains a cross-site scripting vulnerability. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other...
CentralSquare CryWolf - Path Traversal
A traversal vulnerability in GeneralDocs.aspx in CentralSquare CryWolf False Alarm Management through 2024-08-09 allows unauthenticated attackers to read files outside of the working web directory via the rpt parameter, leading to the disclosure of sensitive information. id: CVE-2024-45241 info:...
Netmaker - Hardcoded DNS Secret Key
Netmaker makes networks with WireGuard. Prior to versions 0.17.1 and 0.18.6, hardcoded DNS key usage has been found in Netmaker allowing unauth users to interact with DNS API endpoints. id: CVE-2023-32077 info: name: Netmaker - Hardcoded DNS Secret Key author: iamnoooob,rootxharsh,pdresearch...
WordPress Metform <=2.1.3 - Information Disclosure
WordPress Metform plugin through 2.1.3 is susceptible to information disclosure due to improper access control in the /core/forms/action.php file. An attacker can view all API keys and secrets of integrated third-party APIs such as that of PayPal, Stripe, Mailchimp, Hubspot, HelpScout, reCAPTCHA...
CVE-2026-78051
creationtimestamp| type| source ---|---|--- 2026-08-23 00:06:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/b4ktanbifdzmy...
CVE-2026-59256
creationtimestamp| type| source ---|---|--- 2026-08-23 00:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtpibhhfkx2m...
CVE-2026-78050
creationtimestamp| type| source ---|---|--- 2026-08-22 23:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtphorg3bo2p 2026-08-23 00:00:35+00:00| seen| https://infosec.exchange/users/offseq/statuses/117141879828855162 2026-08-23 00:00:37+00:00| seen|...
CVE-2026-16814
creationtimestamp| type| source ---|---|--- 2026-08-22 23:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtpgxlljvb2u...
CVE-2026-71513
creationtimestamp| type| source ---|---|--- 2026-08-22 23:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtpewfmcze22 2026-08-23 01:10:09+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mtpm5xzluq2i 2026-08-23 01:10:31+00:00| seen|...