76743 matches found
Linux multimedia device driver Heap Buffer Overflow DoS
The vulnerability of the hi846setctrl function in the drivers/media/i2c/hi846.c module of the Linux multimedia device driver framework is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service failure...
📄 Docmost Cross Site Scripting
Docmost versions prior to 0.71.0 suffer from a persistent cross site scripting vulnerability. CVE-2026-34212 Docmost accepted a javascript: URL inside an attachment node, preserved it through storage and rendering, and turned it back into a clickable anchor in the Docmost origin. Intro I...
D-Link DIR-513 Router Buffer Overflow DoS
The vulnerability of D-Link DIR-513 router’s microprogramming software lies in the fact that the operation data is written outside the buffer in memory when processing the webpage parameter. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially...
D-Link DIR-513 Router FormEasySetTimezone Heap Buffer Overflow DoS
The vulnerability of the formEasySetTimezone function /goform/formEasySetTimezone in the embedded web server software of D-Link DIR-513 routers is related to the issue of data being written outside of the buffer in memory when processing the curTime parameter. Exploiting this vulnerability could...
D-Link DIR-513 Router Buffer Overflow
The vulnerability of D-Link DIR-513 router microprogramming software arises due to buffer overflow when processing the curTime parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and cause service failures...
Btrfs file system Heap Buffer Overflow DoS
The vulnerability of the readonechunk function in the fs/btrfs/volumes.c file of the Btrfs file system in the Linux kernel is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service failure...
D-link DIR-823X Router Command Injection
The vulnerability of D-link DIR-823X router microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands when processing the mac parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...
Tenda F453 Router Sub_3C6C0 Function Code Execution
The vulnerability of the sub3C6C0 function /goform/QuickIndex of the Tenda F453 router’s microprogramming system is related to the operation that goes beyond the buffer in memory when processing parameters mitlinktype and PPPOepassword. Exploiting this vulnerability allows a remote attacker to...
D-Link DIR-513 Router Buffer Overflow
The vulnerability of D-Link DIR-513 router’s microprogrammed software is related to the operation of writing data outside the buffer in memory when processing the curTime parameter. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
CVE-2026-56786
creationtimestamp| type| source ---|---|--- 2026-06-25 23:44:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5mddcyuc2u 2026-06-26 12:10:34+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mp6vzhl4h72q 2026-06-27 17:07:07+00:00| seen|...
CVE-2026-6679
creationtimestamp| type| source ---|---|--- 2026-06-25 23:15:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5koutula2a 2026-06-30 14:37:17+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpja36wkfh2v...
CVE-2026-13283
creationtimestamp| type| source ---|---|--- 2026-06-25 23:09:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116813263698329595 2026-06-26 09:45:07+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1937 2026-06-26 14:40:21+00:00| seen|...
CVE-2026-56769
creationtimestamp| type| source ---|---|--- 2026-06-25 23:05:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5k4slih62z...
CVE-2026-56771
creationtimestamp| type| source ---|---|--- 2026-06-25 22:59:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5jtglqfg27...
GO-2026-5688 Mailpit: Incomplete SSRF protection in Link Check API via IPv6 transition mechanisms in github.com/axllent/mailpit
Mailpit: Incomplete SSRF protection in Link Check API via IPv6 transition mechanisms in github.com/axllent/mailpit...
Symlink Attack
Overview Affected versions of this package are vulnerable to Symlink Attack via the file processing mechanism. An attacker can write arbitrary files to the filesystem by exploiting a case-insensitive bypass and missing checks for HardLink/SymLink tags. Remediation Upgrade...
Symlink Attack
Overview Affected versions of this package are vulnerable to Symlink Attack via the file processing mechanism. An attacker can write arbitrary files to the filesystem by exploiting a case-insensitive bypass and missing checks for HardLink/SymLink tags. Remediation There is no fixed version for...
GO-2026-5418 Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd
Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd...
GO-2026-5507 Mattermost has session spoofing due to lack of single-use consumption of guest magic link tokens enforcement in github.com/mattermost/mattermost-server
Mattermost has session spoofing due to lack of single-use consumption of guest magic link tokens enforcement in github.com/mattermost/mattermost-server...