75486 matches found
CVE-2026-64225
A flaw was found in the Linux kernel's octeontx2-af: CGX component. This vulnerability arises from an out-of-bounds array access. Specifically, the RESPLINKSTATSPEED function can produce an index value that exceeds the allocated size of the cgxspeedmbps array, leading to memory corruption. This...
CVE-2026-65880
creationtimestamp| type| source ---|---|--- 2026-07-28 12:27:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpfvx6jg224...
CVE-2026-15267
creationtimestamp| type| source ---|---|--- 2026-07-28 12:11:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpezcbinh2i...
CVE-2026-8167
creationtimestamp| type| source ---|---|--- 2026-07-28 11:53:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpdyyeigg2s...
CVE-2026-9680
creationtimestamp| type| source ---|---|--- 2026-07-28 11:35:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpcypa3cy2a...
Froxlor Server Management - Cross-Site Scripting Detection
Froxlor Server Management is susceptible to cross-site scripting via clicking the forgot password link. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials...
D-Link DCS - Unauth Credential Disclosure Detection (CVE-2020-25078)
Detects CVE-2020-25078 by requesting /config/getuser?index=0 and looking for name=/pass= credential lines without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DCS IP camera credential disclosure via /config/getuser CVE-2020-25078.""" import re from kittysploit import from...
D-Link DIR-600M - Authentication Bypass Detection
D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices can be accessed directly without authentication and lead to disclosure of information about the WAN, which can then be leveraged by an attacker to modify the data fields of the page. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DIR-600M...
D-Link DIR-3040 1.13B03 - Information Disclosure Detection
D-Link DIR-3040 1.13B03 is susceptible to information disclosure in the Syslog functionality. A specially crafted HTTP network request can lead to the disclosure of sensitive information. An attacker can obtain access to user accounts and access sensitive information, modify data, and/or execute...
Mailcow < 2026-03b - Href Link Injection Detection
mailcow 2026-03b reflects raw REQUESTURI into JavaScript and href links on the login page, allowing attackers to inject parameters that break JS logic and enable phishing. !/usr/bin/env python3 -- coding: utf-8 -- """mailcow 2026-03b reflects raw REQUESTURI into JavaScript and href links on the...
D-Link DIR-610 Devices - Information Disclosure Detection
D-Link DIR-610 devices allow information disclosure via SERVICES=DEVICE.ACCOUNT%0AAUTHORIZEDGROUP=1 to getcfg.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DIR-610 devices allow information...
TP-Link Archer A20 v3 Router - Cross-site Scripting Detection
The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting XSS due to improper handling of directory listing paths in the web interface. When a specially crafted URL is visited, the router's web page renders the directory listing and executes arbitrary JavaScript embedded in the URL...
IR Trends Q2 2026: Phishing and weaponized remote management tools drive attack chains
Phishing was the primary means of gaining initial access this quarter, appearing in over half of all Cisco Talos Incident Response Talos IR engagements - an increase from approximately a third of engagements last quarter. Attackers continued to innovate their delivery methods to evade defenses,...
CVE-2026-16462
creationtimestamp| type| source ---|---|--- 2026-07-28 09:29:06+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mrp3vuzo4l42 2026-07-28 11:47:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpdnn7ydg23 2026-07-28 15:26:06+00:00| seen|...
CVE-2026-51153
creationtimestamp| type| source ---|---|--- 2026-07-28 08:50:13+00:00| seen| https://gist.github.com/kurokoleung/9fc51b02c85c2f466bf4ea72c62ba343...
CVE-2026-14870
creationtimestamp| type| source ---|---|--- 2026-07-28 08:48:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrozocfqqs2i 2026-10-21 14:07:10+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-14870.yaml...
CVE-2026-16585
creationtimestamp| type| source ---|---|--- 2026-07-28 08:17:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mroxw53onb2e...
CVE-2026-14545
creationtimestamp| type| source ---|---|--- 2026-07-28 08:06:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mroxdaviyq2q 2026-07-28 14:14:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrpltsrhpu22...
CVE-2026-53669
A flaw was found in React Router, a routing library for React applications. A remote attacker could exploit this vulnerability by crafting a malicious link that uses backslashes within the or useNavigate components. This could lead to an Open Redirect, allowing the attacker to redirect users to...