74677 matches found
CVE-2026-13230: Exposure of Sensitive Information to an Unauthorized Actor
An information disclosure vulnerability was identified in TP-Link Kasa EC70 v4 and EC71 v4 in the local discovery mechanism, which exposes sensitive geolocation information without requiring authentication. This issue allows an attacker on the same local network to retrieve geolocation-related da...
PT-2026-58878
The installer of HYPER SBI 2 insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking the affected installer, arbitrary code may be executed with the privilege of the user invoking the installer...
PT-2026-60145
Name of the Vulnerable Software and Affected Versions grav-plugin-api versions prior to 1.0.4 Description An unauthenticated attacker can cause a password reset email to contain a link pointing to a server under their control. This occurs because the sanitizeHttpUrl function fails to verify the...
PT-2026-60260
Dashy is a self-hostable personal dashboard. From 1.9.4 until 3.2.0, the Dashy RSS Widget in src/components/Widgets/RssFeed.vue does not sanitize RSS item link values before rendering feed item titles and Read More links as anchor href attributes, allowing an attacker-controlled feed to provide a...
G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Backup...
The vulnerability in the net/core/skbuff.c component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the net/core/skbuff.c component in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-15769
creationtimestamp| type| source ---|---|--- 2026-07-14 23:43:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnf5nd2jx2e 2026-07-16 04:45:18+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260716 2026-07-17 21:37:06+00:00| seen|...
CVE-2026-48334
creationtimestamp| type| source ---|---|--- 2026-07-14 23:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqndbdebps2z 2026-07-15 04:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116922110851046198 2026-07-15 04:30:28+00:00| seen|...
CVE-2026-48352
creationtimestamp| type| source ---|---|--- 2026-07-14 23:01:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqncsmovb22l...
CVE-2026-15738
creationtimestamp| type| source ---|---|--- 2026-07-14 23:01:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqncsl2fl42i 2026-07-15 17:07:09+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3mqp7hcc4fo2b...
CVE-2026-15772
creationtimestamp| type| source ---|---|--- 2026-07-14 22:42:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnbqvwgy52z 2026-07-15 23:02:16+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116926482748057348 2026-07-16 04:45:25+00:00| seen|...
GHSA-9HC2-HJX8-Q6PV
creationtimestamp| type| source ---|---|--- 2026-07-14 22:42:05+00:00| seen| https://gist.github.com/alon710/2e36d4018e71382099203c9d78e54337 2026-07-15 00:00:00+00:00| seen| https://gist.github.com/alon710/2e36d4018e71382099203c9d78e54337...
UBUNTU-CVE-2026-54572
Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.74.4, with -l/--links, rclone serializes symlinks as .rclonelink text objects and recreates them on a local destination without validating the target, allowing an...
CVE-2026-15750
A weakness has been identified in mastergo-design mastergo-magic-mcp up to 0.2.0. Impacted is the function z.string of the file src/tools/get-component-link.ts of the component mcpgetComponentLink. Executing a manipulation of the argument url can lead to server-side request forgery. The attack ma...
CVE-2026-15643
creationtimestamp| type| source ---|---|--- 2026-07-14 22:14:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqna5acr362r 2026-07-15 17:07:13+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3mqp7hgmo632m...
CVE-2026-48259
creationtimestamp| type| source ---|---|--- 2026-07-14 22:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqn7w3ijbo2f 2026-07-15 10:18:27+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mqoimj2ktr27 2026-07-18 03:37:06+00:00| seen|...
CVE-2026-48359
creationtimestamp| type| source ---|---|--- 2026-07-14 22:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqn7w2btli2t 2026-07-15 10:18:21+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mqoimczvq22q 2026-07-18 03:07:07+00:00| seen|...
EUVD-2026-44418
Adobe Commerce is affected by an Improper Redirect Open Redirect vulnerability that could result in a Security feature bypass. An attacker could construct a malicious URL that redirects a victim to an attacker-controlled site, potentially enabling credential theft and account takeover. Exploitati...
EUVD-2026-44362
TP-Link Deco M5 v1 uses a weak password hashing mechanism to store user credentials. An attacker who obtains the password hash through system compromise or privileged access could perform brute-force or dictionary attacks. Successful exploitation may result in disclosure of authentication...
CVE-2026-15750 mastergo-design mastergo-magic-mcp mcp__getComponentLink get-component-link.ts z.string server-side request forgery
A weakness has been identified in mastergo-design mastergo-magic-mcp up to 0.2.0. Impacted is the function z.string of the file src/tools/get-component-link.ts of the component mcpgetComponentLink. Executing a manipulation of the argument url can lead to server-side request forgery. The attack ma...