75367 matches found
CVE-2026-9044
Technical details about CVE-2026-9044 are not publicly available in the provided documents; monitor for updates.
CVE-2026-9044
An OS command injection vulnerability exists in the VPN module of TP-Link AXE75 V1 routers. This vulnerability allows an adjacent, authenticated attacker to execute arbitrary commands on the device by importing a specially crafted VPN client configuration file. The issue arises from improper...
CVE-2026-9044 Command Injection Vulnerability in OpenVPN of TP-Link Archer AXE75
An OS command injection vulnerability exists in the VPN module of TP-Link AXE75 V1 routers. This vulnerability allows an adjacent, authenticated attacker to execute arbitrary commands on the device by importing a specially crafted VPN client configuration file. The issue arises from improper...
CVE-2026-62959
creationtimestamp| type| source ---|---|--- 2026-07-31 21:55:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/duejp3dwq35n3 2026-08-01 00:15:24+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-62959...
CVE-2026-56066
creationtimestamp| type| source ---|---|--- 2026-07-31 21:44:39+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrxwfbprgd26...
CVE-2026-53551
creationtimestamp| type| source ---|---|--- 2026-07-31 21:31:45+00:00| seen| https://gist.github.com/alon710/0f09a6f6c7f9c253322faa348755ead8 2026-07-31 22:35:11+00:00| published-proof-of-concept| https://github.com/free5gc/free5gc/security/advisories/GHSA-qj55-47fp-p62j 2026-08-01 00:15:08+00:00...
CVE-2026-50986
PrestaShop module, totadministrativemandate 1.8.1 is vulnerable to Cross Site Request Forgery CSRF. The payment validation controller has no CSRF token. An attacker can confirm an order in an awaiting status by hijacking a link...
GHSA-3WHF-VGF2-9W6G
creationtimestamp| type| source ---|---|--- 2026-07-31 20:31:22+00:00| seen| https://gist.github.com/alon710/124f7bf887e5079fb15a66958a9543ef...
CVE-2025-69933
creationtimestamp| type| source ---|---|--- 2026-07-31 20:06:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxqvxseu72l...
CVE-2026-52856
creationtimestamp| type| source ---|---|--- 2026-07-31 19:51:07+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrxq3akldl23 2026-08-02 07:02:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms3fwwqe6w2e...
GHSA-4328-8HGF-7WJR
creationtimestamp| type| source ---|---|--- 2026-07-31 19:38:28+00:00| seen| https://gist.github.com/konard/91df17bf902150322c465ca6b6479053...
CVE-2026-53504
creationtimestamp| type| source ---|---|--- 2026-07-31 19:31:28+00:00| seen| https://gist.github.com/alon710/de1c5b8263f3d3a5d1101a3c2a0269ab 2026-07-31 20:35:27+00:00| published-proof-of-concept| https://github.com/thumbor/thumbor/security/advisories/GHSA-5vjc-7cxw-4w6j...
CVE-2026-62324
Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor. Prior to 4.12.31, Jodit's sanitizeHTMLElement method fails to use isDangerousUrl to normalize javascript: href values before checking the scheme, allowing case variants, control-byte prefixes, and embedded tabs or...
CVE-2026-62324 Jodit has incomplete javascript: scheme normalization in sanitizeHTMLElement href check that allows link XSS
Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor. Prior to 4.12.31, Jodit's sanitizeHTMLElement method fails to use isDangerousUrl to normalize javascript: href values before checking the scheme, allowing case variants, control-byte prefixes, and embedded tabs or...
EUVD-2026-51621
Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor. Prior to 4.12.31, Jodit's sanitizeHTMLElement method fails to use isDangerousUrl to normalize javascript: href values before checking the scheme, allowing case variants, control-byte prefixes, and embedded tabs or...
CVE-2026-62324 Jodit has incomplete javascript: scheme normalization in sanitizeHTMLElement href check that allows link XSS
Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor. Prior to 4.12.31, Jodit's sanitizeHTMLElement method fails to use isDangerousUrl to normalize javascript: href values before checking the scheme, allowing case variants, control-byte prefixes, and embedded tabs or...
CVE-2026-15969
creationtimestamp| type| source ---|---|--- 2026-07-31 19:02:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxndlbvkx2h 2026-08-05 14:27:15+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3msdqcbbsp726 2026-08-06 03:18:46+00:00| seen|...
GHSA-MJ3G-7XCC-X4VH
creationtimestamp| type| source ---|---|--- 2026-07-31 18:32:14+00:00| seen| https://gist.github.com/alon710/3afa9bbe175e1dfd1649cd2081ad6eb5...
CVE-2026-18481
Stored cross-site scripting in the participant URL handling in AWS Ops Wheel before PR 168 might allow an authenticated remote user to steal session tokens and escalate to full administrative control of the deployed instance via a crafted participanturl value containing a dangerous URI scheme. To...