ECHO-EA09-CCA5-BA23

Bulletin has no description...

CVE-2025-41726

creationtimestamp| type| source ---|---|--- 2026-01-27 11:38:25+00:00| seen| https://infosec.exchange/users/certvde/statuses/115966863286149942 2026-01-27 11:38:33+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mdfobyoxp2c2 2026-01-27 12:02:48+00:00| seen|...

CVE-2018-14851

creationtimestamp| type| source ---|---|--- 2026-01-27 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-027-02...

CVE-2026-24830

creationtimestamp| type| source ---|---|--- 2026-01-27 10:05:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115966496664593357 2026-01-27 10:27:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdfkcuouhg2m 2026-01-27 12:25:53+00:00| seen|...

CVE-2026-1414 Sangfor Operation and Maintenance Security Management System HTTP POST Request get_Information getInformation command injection

A vulnerability was determined in Sangfor Operation and Maintenance Security Management System up to 3.0.12. This impacts the function getInformation of the file /equipment/getInformation of the component HTTP POST Request Handler. Executing a manipulation of the argument fortEquipmentIp can lead...

CVE-2026-23012

creationtimestamp| type| source ---|---|--- 2026-01-25 15:10:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdaz7qfiv62i 2026-01-25 15:34:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115956467313120586...

GHSA-X7V4-P4G4-F7V7

creationtimestamp| type| source ---|---|--- 2026-01-24 22:43:36+00:00| seen| https://gist.github.com/alon710/65d6df2ffba06917264d834b93896938...

GHSA-PC9J-5V36-2MWW

creationtimestamp| type| source ---|---|--- 2026-01-24 21:26:36+00:00| seen| https://gist.github.com/alon710/4168158bdc42a1017e72ec3633e1f2e1 2026-01-24 22:41:58+00:00| seen| https://gist.github.com/alon710/c011c67fa0cae97680cf3718a4db61e5...

EUVD-2026-4564

The ThemeRuby Multi Authors – Assign Multiple Writers to Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'before' and 'after' shortcode attributes in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it...

EUVD-2026-4579

The GZSEO plugin for WordPress is vulnerable to authorization bypass leading to Stored Cross-Site Scripting in all versions up to, and including, 2.0.11. This is due to missing capability checks on multiple AJAX handlers combined with insufficient input sanitization and output escaping on the...

EUVD-2026-4569

The Cookie consent for developers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple settings fields in all versions up to, and including, 1.7.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

EUVD-2026-4581

The Alchemist Ajax Upload plugin for WordPress is vulnerable to unauthorized media file deletion due to a missing capability check on the 'deletefile' function in all versions up to, and including, 1.1. This makes it possible for unauthenticated attackers to delete arbitrary WordPress media...

EUVD-2026-4576

The Simple Crypto Shortcodes plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.2. This is due to missing nonce validation on the scsbackend function. This makes it possible for unauthenticated attackers to update plugin settings via a forged...

EUVD-2026-4587

Not used...

EUVD-2026-4595

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Salesforce Marketing Cloud Engagement CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules allows Web Services Protocol Manipulation. This issue affects Marketing Cloud...

EUVD-2026-4286

Unified Remote 3.9.0.2463 contains a remote code execution vulnerability that allows attackers to send crafted network packets to execute arbitrary commands. Attackers can exploit the service by connecting to port 9512 and sending specially crafted packets to open a command prompt and download an...

EUVD-2026-4312

In the Linux kernel, the following vulnerability has been resolved: wifi: avoid kernel-infoleak from struct iwpoint struct iwpoint has a 32bit hole on 64bit arches. struct iwpoint void user pointer; / Pointer to the data in user space / u16 length; / number of fields or size in bytes / u16 flags;...

EUVD-2026-4306

In the Linux kernel, the following vulnerability has been resolved: gpio: mpsse: ensure worker is torn down When an IRQ worker is running, unplugging the device would cause a crash. The sealevel hardware this driver was written for was not hotpluggable, so I never realized it. This change uses a...

EUVD-2026-4339

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Rosebud rosebud allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rosebud: from n/a through = 1.4...

EUVD-2026-4344

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jagdish1o1 Delay Redirects delay-redirects allows DOM-Based XSS.This issue affects Delay Redirects: from n/a through = 1.0.0...