ECHO-5CD0-42C5-E641

Bulletin has no description...

CVE-2021-4034

Questo repository non contiene un README...

CVE-2021-36260-hikvision

CVE-2021-36260 CVE-2021-36260는 일부 Hikvision 제품의 웹 서버에서 발생하는 POC 명령 주입 취약점입니다. 불충분한 입력 검증으로 인해, 공격자는 악성 명령이 포함된 일부 메시지를 전송하여 명령 주입 공격을 실행할 수 있습니다. Exploit 제목: Hikvision 웹 서버 빌드 210702 - 명령 주입 Exploit 작성자: bashis -- shubtheone이 오류 업데이트 공급업체 홈페이지: https://www.hikvision.com/ 버전: 1.0 CVE: CVE-2021-362...

PT-2026-82794

The affected Ebyte device relies on client-managed authentication tokens without sufficient server-side validation. An attacker may replay or manipulate authentication tokens to gain unauthorized access to administrative functionality...

PT-2026-82739

Name of the Vulnerable Software and Affected Versions MongoDB client library for PHP affected versions not specified Description The MongoDB client library for PHP fails to properly sanitize special elements within application-supplied namespace identifiers used to construct target namespaces for...

CVE-2024-1874

CVE-2024-1874 CVE-2024-1874 के लिए प्रूफ ऑफ कॉन्सेप्ट कमांड इंजेक्शन Array-ish $command Parameter of procopen के माध्यम से CVE-2024-1874 फिक्स को बायपास करना CVE: PHP संस्करण 8.1. 8.1.29 से पहले, 8.2. 8.2.20 से पहले, 8.3. 8.3.8 से पहले, CVE-2024-1874 का फिक्स तब काम नहीं करता जब कमांड नाम में...

CVE-2026-65956

creationtimestamp| type| source ---|---|--- 2026-08-26 23:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtzhutlem32p 2026-08-27 00:07:37+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtzkjt5mgz2t...

CVE-2025-56643

CVE-2025-56643 Referência pública para CVE-2025-56643 – Vulnerabilidade de Sessão JWT do Wiki.js 2.5.307 Descrição: O Requarks Wiki.js 2.5.307 não revoga ou invalida corretamente tokens JWT ativos quando um utilizador termina a sessão. Como resultado, tokens emitidos anteriormente permanecem...

whatsapp-census

Hey! Du nutzt WhatsApp Dies ist das GitHub-Repository für die erweiterte Version des Papers Hey there! You are using WhatsApp: Enumerating Three Billion Accounts for Security and Privacy. Zusammenfassung WhatsApp ist mit 3,5 Milliarden aktiven Konten Stand Anfang 2025 die größte...

ECHO-98AB-D175-C089

Bulletin has no description...

CVE-2025-56807

CVE-2025-56807 Descrizione Una vulnerabilità di Stored Cross Site Scripting XSS è stata scoperta in FairSketch RISE Ultimate Project Manager & CRM v3.9.4 nella funzionalità File Manager. La vulnerabilità risiede nel parametro title inviato durante la creazione di nuove cartelle. A causa di una...

CVE-2026-48786

Fleet is an open-source device management platform built on osquery. In versions prior to 4.87.0, the target search endpoint POST /api/latest/fleet/targets returned unmasked team enroll secrets and full team configuration, including credential-bearing agent options, to low-privilege observer-clas...

CVE-2026-76956

A flaw was found in libexpat. This vulnerability arises from the software misinterpreting a return code, leading to insufficient randomness entropy for hash functions. A remote attacker could exploit this by sending specially crafted XML content, triggering hash flooding attacks. This can result ...

CVE-2026-76784

Multiple TP-Link Kasa smart home devices contain insufficient cryptographic protections in the local device communication protocol. An adjacent network attacker may intercept, replay or forge locally exchanged control messages, potentially resulting in unauthorized device control. Successful...

CVE-2026-76784 Insufficient Cryptographic Protections in Local Device Communication Protocol on Multiple TP-Link Kasa Smart Home Devices

Multiple TP-Link Kasa smart home devices contain insufficient cryptographic protections in the local device communication protocol. An adjacent network attacker may intercept, replay or forge locally exchanged control messages, potentially resulting in unauthorized device control. Successful...

DEBIAN-CVE-2026-80541

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate GEMCREATE domain combinations AMDGPUGEMCREATE checked domain bits against AMDGPUGEMDOMAINMASK, but did not validate domain combinations. Userspace could combine CPU|GTT|VRAM with DOORBELL, GDS, GWS, or OA,...

EUVD-2026-66555

The LoRaWAN application-layer clock-synchronization service parses downlinks in clocksyncpackagecallback subsys/lorawan/services/clocksync.c. Its command loop only guarantees that the one-byte command id is in bounds; for the CLOCKSYNCCMDAPPTIME AppTimeAns command the handler then reads a 4-byte...

EUVD-2026-66423

Rently Smart Home versions 20.1.0 and prior are vulnerable to an Insufficiently Protected Credentials vulnerability. This could allow an attacker to retrieve pins including the Master Pin, overriding standard user permissions...

CVE-2026-15985

creationtimestamp| type| source ---|---|--- 2026-08-26 12:35:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fmaif36okxbc6 2026-08-27 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mu2r7bq7nq2o...

CVE-2026-77542

creationtimestamp| type| source ---|---|--- 2026-08-26 11:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mty6jmjtc42m 2026-08-27 07:00:04+00:00| seen| https://t.me/GithubRedTeam/99900 2026-08-27 16:00:04+00:00| seen| Telegram/EP2u8OGan0flSGLl45h1b-LiiKVRCNQN1i62iKzOsOD7LI...