EUVD-2026-1789

Improper Export of Android Application Components in UwbTest prior to SMR Jan-2026 Release 1 allows local attackers to enable UWB...

GHSA-9583-H5HC-X8CW

creationtimestamp| type| source ---|---|--- 2026-01-08 21:03:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115861500887450169 2026-01-10 04:02:20+00:00| seen| Telegram/hIscdD1HJtLSg0SDRbuSjzrqCFMwMv5SX0wjW8Bk7vM6o 2026-01-24 21:24:48+00:00| seen|...

CVE-2025-50334

creationtimestamp| type| source ---|---|--- 2026-01-08 16:42:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115860473488145891 2026-01-08 20:02:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbwrl2am6i2a...

EUVD-2026-1484

Missing Authorization vulnerability in Passionate Brains GA4WP: Google Analytics for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GA4WP: Google Analytics for WordPress: from n/a through 2.10.0...

GHSA-XFRJ-C749-JXXQ

creationtimestamp| type| source ---|---|--- 2026-01-08 15:41:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115860235130064905 2026-01-08 17:15:40+00:00| seen| Telegram/KVWOQnBiY3Eem9HhxjtYUT7TdVna0GpQEMRBO0Jx4tvF1fc...

GHSA-C4CH-XW5P-2MVC

creationtimestamp| type| source ---|---|--- 2026-01-08 15:13:52+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115860126536933892 2026-01-08 16:03:29+00:00| seen| Telegram/eK7Ikx8B4zhc3RXJcMY-EZtQzuwPO0YG4YMu0LZCUnsVEJo...

EUVD-2026-1564

Asseco ADMX system is used for processing medical records. It allows logged in users to access medical files belonging to other users through manipulation of GET arguments containing document IDs. This issue has been fixed in 6.09.01.62 version of ADMX...

EUVD-2026-1565

Asseco InfoMedica is a comprehensive solution used to manage both administrative and medical tasks in the healthcare sector. Passwords of all users are stored in a database in an encoded format. An attacker in possession of these encoded passwords is able to decode them by using an algorithm...

CVE-2025-67919

creationtimestamp| type| source ---|---|--- 2026-01-08 10:59:25+00:00| seen| https://gist.github.com/Darkcrai86/1ae580200e97bb963012f305f8abb336 2026-01-08 17:05:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbwhpxrw5t2p 2026-01-08 17:14:13+00:00| seen|...

EUVD-2026-1582

When an OAuth2 bearer token is used for an HTTPS transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new target host...

EUVD-2026-1577

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in webaware NextGEN Download Gallery nextgen-download-gallery allows Retrieve Embedded Sensitive Data.This issue affects NextGEN Download Gallery: from n/a through = 1.6.2...

EUVD-2026-1430

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in zozothemes Corpkit corpkit allows PHP Local File Inclusion.This issue affects Corpkit: from n/a through = 2.0...

EUVD-2026-1537

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in brandexponents Oshine oshin allows PHP Local File Inclusion.This issue affects Oshine: from n/a through = 7.2.7...

CVE-2026-21883

creationtimestamp| type| source ---|---|--- 2026-01-08 02:38:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbuxagdnzk2q 2026-01-24 21:30:26+00:00| seen| https://gist.github.com/alon710/1a8cdfc9ee48e8684ff81a0e3d627083...

EUVD-2026-1502

A command injection vulnerability exists in the GL-iNet GL-AXT1800 router firmware v4.6.8. The vulnerability is present in the plugins.installpackage RPC method, which fails to properly sanitize user input in package names. Authenticated attackers can exploit this to execute arbitrary commands wi...

CVE-2017-20216

creationtimestamp| type| source ---|---|--- 2026-01-07 23:26:03+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115856399563013611 2026-01-08 01:55:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbuuubwihd2m 2026-01-08 21:03:02+00:00| seen|...

GHSA-38JV-5279-WG99

creationtimestamp| type| source ---|---|--- 2026-01-07 22:20:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115856142351388778 2026-01-07 23:09:50+00:00| seen| Telegram/Hv7piurWFmTJB7c7iHri9T0M-meMIfk5qPkk7ikOJpSuKtA 2026-01-24 21:26:41+00:00| seen|...

CVE-2025-13151

creationtimestamp| type| source ---|---|--- 2026-01-07 21:34:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115855961867696249 2026-01-07 22:51:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbukljqwrf2v 2026-01-07 23:09:29+00:00| seen|...

CVE-2025-69139

creationtimestamp| type| source ---|---|--- 2026-01-07 20:05:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115855612215838975...

EUVD-2026-1211

An attacker with access to the system's internal network can cause a denial of service on the system by making two concurrent connections through the Telnet service...