CVE-2026-44176 Kirby: `pages.access` permission is not checked during rendering of page drafts

Kirby is an open-source content management system. Versions prior to 4.9.1 and 5.4.1 do not check the pages.access permission during page draft rendering. Permissions are defined for each user role in the user blueprint site/blueprints/users/.... It is also possible to customize the permissions f...

CVE-2026-57896

An out-of-bounds read vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption by sending a crafted IOCTL request. This could lead to limited information disclosure or disruption of the affected product...

CVE-2026-38158

A SQL injection vulnerability in the /ureport/datasource/previewData component of ureport v2.2.9 allows attackers to access sensitive database information via crafted SQL statements...

CVE-2024-32386

Directory traversal vulnerability in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.320200803132042 allows a remote attacker to obtain sensitive information via the SNMP update mechanism...

CVE-2024-32389

Buffer Overflow vulnerability in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.320200803132042 allows a remote attacker to obtain sensitive information via the update URLs component...

CVE-2024-32385

An issue in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.320200803132042 allows a remote attacker to obtain sensitive information via a boardID and revisionID components...

CVE-2026-57896

An out-of-bounds read vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption by sending a crafted IOCTL request. This could lead to limited information disclosure or disruption of the affected product...

EUVD-2026-45035

An out-of-bounds read vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption by sending a crafted IOCTL request. This could lead to limited information disclosure or disruption of the affected product...

CVE-2026-57896

The CVE-2026-57896 relates to an out-of-bounds read in AutomationDirect Productivity Suite exploitable via a crafted IOCTL request from a local attacker, potentially causing kernel memory corruption with information disclosure and disruption. Affected component/behavior is the Productivity Suite’...

EUVD-2026-45026

An out-of-bounds read vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption by sending a crafted IOCTL request. This can lead to exposing sensitive information or causing the affected product to become unstable or unavailable...

CVE-2026-63089 WireGuard Easy Weak Token Generation Information Disclosure via OTL Route

WireGuard Easy through 15.3.0, fixed in commit 66b292b, contains a cryptographically weak one-time link token generation vulnerability that allows unauthenticated network attackers to recover WireGuard peer credentials by brute-forcing a keyspace of at most 1000 candidate tokens per client ID, as...

CVE-2026-63089

CVE-2026-63089 – WireGuard Easy : A cryptographically weak one-time link token generation in WireGuard Easy (through 15.3.0) allows unauthenticated network attackers to recover peer credentials. The token is computed as CRC32 over a random value constrained to 0-999, enabling brute-forcing a keys...

CVE-2019-9702

creationtimestamp| type| source ---|---|--- 2026-07-16 19:00:07+00:00| seen| Telegram/RoMJMyaO9qCYkhsSAc77CM1sHfRGAI14pGHUT-hscWYLSyM 2026-07-16 19:00:07+00:00| seen| Telegram/iYHsotoqlE8Z-AEKaQiVsXXSjTyl0MfV01akvHQ1zfYFYEI 2026-07-17 00:00:10+00:00| published-proof-of-concept|...

Malicious code in captcha-solve-api (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee854f4888e58f81b9e22e7addd740d28a717be453133c10267dd91fc5e50cee The package advertises itself as a REST client for a captcha-solving API, but the shipped captchasolveapi module is a 20-line stub. The tarball's rea...

CVE-2026-13397

creationtimestamp| type| source ---|---|--- 2026-07-16 18:14:26+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqrtojx6yx2m...

CVE-2026-59197

A flaw was found in Pillow prior to 12.3.0. The public RankFilter API can trigger a native heap out-of-bounds write when given a very large odd filter size. ImageFilter.RankFilter.filter calls image.expandsize // 2, size // 2 before rank-filter size validation, and ImagingExpand computes output...

CVE-2026-51380

creationtimestamp| type| source ---|---|--- 2026-07-16 16:34:02+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116930618228870140 2026-07-16 16:40:28+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqroftqfcv2u...

CVE-2026-8085

creationtimestamp| type| source ---|---|--- 2026-07-16 16:15:30+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-01 2026-07-21 08:59:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr5gyg37xi2p 2026-07-21 08:59:19+00:00| seen|...

CVE-2026-54568

Microsoft UFO open-source framework for intelligent automation across devices and platforms. From 3.0.0 until 3.0.6, a client connected to the UFO WebSocket server as a DEVICE could call DEVICEINFOREQUEST with another device's targetid and receive that device's server-side systeminfo through...

CVE-2026-54568

CVE-2026-54568 affects Microsoft UFO (open‑source framework). From 3.0.0 through 3.0.6, a client connected as a DEVICE to the UFO WebSocket server could call DEVICE_INFO_REQUEST with another device’s target_id and receive that device’s server‑side system_info due to missing constellat ion/ object...