68923 matches found
PYSEC-2026-3447
creationtimestamp| type| source ---|---|--- 2026-07-24 09:40:25+00:00| seen| https://gist.github.com/sw1pp3r/00f32e3393b6c6123cc7aeaff3ed9f18...
CVE-2026-16519
A DLL hijacking vulnerability exists in the GeoVision GV-IP Device Utility desktop application. The application loads one or more dynamic-link libraries DLLs from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library locatio...
EUVD-2026-48512
A DLL hijacking vulnerability exists in the GeoVision GV-IP Device Utility desktop application. The application loads one or more dynamic-link libraries DLLs from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library locatio...
CVE-2026-16519 GeoVision GV-IP Device Utility DLL Search Order Hijacking Vulnerability
A DLL hijacking vulnerability exists in the GeoVision GV-IP Device Utility desktop application. The application loads one or more dynamic-link libraries DLLs from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library locatio...
CVE-2026-6454
The Firelight Lightbox plugin for WordPress is vulnerable to Stored DOM Cross-Site Scripting in versions up to and including 2.3.20. This is due to insufficient sanitization of the href attribute value within the FancyBox V2 PDF beforeLoad JavaScript callback generated in inc/fancybox-2.php, wher...
CVE-2026-11354
The Participants Database plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.8.3 via the 'id' parameter. This makes it possible for unauthenticated attackers to overwrite arbitrary participant records by numeric ID and redirect the...
CVE-2026-45820
creationtimestamp| type| source ---|---|--- 2026-07-24 02:48:49+00:00| seen| https://bsky.app/profile/opsmatters.com/post/3mredorzn2s2t 2026-08-04 04:47:06+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3msa7gdsqch2o 2026-09-04 12:37:18+00:00| seen|...
CVE-2026-11354
The Participants Database plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.8.3 via the 'id' parameter. This makes it possible for unauthenticated attackers to overwrite arbitrary participant records by numeric ID and redirect the...
EUVD-2026-48462
The Firelight Lightbox plugin for WordPress is vulnerable to Stored DOM Cross-Site Scripting in versions up to and including 2.3.20. This is due to insufficient sanitization of the href attribute value within the FancyBox V2 PDF beforeLoad JavaScript callback generated in inc/fancybox-2.php, wher...
CVE-2026-16756
creationtimestamp| type| source ---|---|--- 2026-07-24 01:01:22+00:00| seen| https://bsky.app/profile/rindrics.com/post/3mre5olrots2j 2026-07-25 04:31:18+00:00| seen| https://gist.github.com/alon710/5da01f85fee825f05b5c606f0085a6c9...
CVE-2026-54120
creationtimestamp| type| source ---|---|--- 2026-07-24 00:22:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mre3igg2c62a 2026-07-24 13:08:20+00:00| seen| https://bsky.app/profile/thecircuitry.to/post/3mrfgcioxnn2j 2026-07-24 13:30:31+00:00| seen|...
CVE-2026-56165
creationtimestamp| type| source ---|---|--- 2026-07-24 00:22:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mre3iezou62v 2026-07-24 05:00:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrel2wg5nh2f 2026-07-31 02:07:06+00:00| seen|...
PT-2026-64297
Name of the Vulnerable Software and Affected Versions Loytec L-INX versions prior to 8.4.17 Loytec L-GATE versions prior to 8.4.17 Loytec L-ROC versions prior to 8.4.17 Loytec L-IOB versions prior to 8.4.17 Loytec L-DALI versions prior to 8.4.17 Loytec L-VIS versions prior to 8.4.17 Loytec L-PAD...
PT-2026-64253
A DLL hijacking vulnerability exists in the GeoVision GV-IP Device Utility desktop application. The application loads one or more dynamic-link libraries DLLs from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library locatio...
PT-2026-64301
Name of the Vulnerable Software and Affected Versions Loytec LWEB-802 versions prior to 5.0.8 Description An issue exists where sensitive information is exposed within the browser localStorage. This allows an unauthenticated remote attacker to leak stored management credentials by using a crafted...
PT-2026-64409
Name of the Vulnerable Software and Affected Versions Milkdown versions prior to 7.21.3 Description A stored cross-site scripting issue exists in the @milkdown/preset-commonmark and @milkdown/components packages. Attackers with document write access can execute arbitrary JavaScript in the browser...
PT-2026-67307
Name of the Vulnerable Software and Affected Versions better-auth versions 1.1.3 through 1.6.21 better-auth versions 1.7.0-beta.0 through 1.7.0-beta.9 Description A pre-account hijacking flaw allows account takeover when open email and password registration is enabled alongside magic-link or...
PT-2026-64377
Name of the Vulnerable Software and Affected Versions sysPass versions prior to 3.2.12 Description Authenticated users possessing the PUBLICLINK CREATE profile flag can trigger unauthorized decryption and persistent storage of any vault account password. This occurs due to missing AccountAcl chec...
CVE-2026-12503: Improper Link Resolution Before File Access
Improper Link Resolution CWE-59 in /usr/bin/larmstarter in Loytec L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows an authenticated larmapp attacker to make /etc/passwd writable by the larmapp group leading to root privilege escalation via a symlink attack on...
PT-2026-64334
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A stack buffer overflow occurs in the dc process dmub aux transfer async function when payload-length bytes are copied into a 16-byte stack buffer dpaux.data16. Because the check is...