OSSEC HIDS 4.2.0

OSSEC is a full platform to monitor and control your systems. It mixes together all the aspects of HIDS host-based intrusion detection, log monitoring and SIM/SIEM together in a simple, powerful and open source solution. This is the source code release...

CVE-2026-14214

creationtimestamp| type| source ---|---|--- 2026-08-01 14:43:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzpdtkybh24 2026-08-01 14:43:51+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzpepsjd42u 2026-08-01 15:26:19+00:00| seen|...

CVE-2026-13158

creationtimestamp| type| source ---|---|--- 2026-08-01 14:00:04+00:00| seen| https://t.me/GithubRedTeam/96151 2026-08-01 14:53:39+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mrzpwamqyx2r 2026-08-01 14:53:39+00:00| seen|...

CVE-2026-10773

The DHCPv4 client helper netdhcpv4msgtypename in subsys/net/lib/dhcpv4/dhcpv4.c indexes a static 8-element const char name table after a faulty bounds check. The guard used msgtype = sizeofname instead of msgtype = ARRAYSIZEname; sizeof returns the byte size of the pointer array 32 on 32-bit, 64 ...

CVE-2026-10773

The DHCPv4 client helper netdhcpv4msgtypename in subsys/net/lib/dhcpv4/dhcpv4.c indexes a static 8-element const char name table after a faulty bounds check. The guard used msgtype = sizeofname instead of msgtype = ARRAYSIZEname; sizeof returns the byte size of the pointer array 32 on 32-bit, 64 ...

EUVD-2026-51868

The DHCPv4 client helper netdhcpv4msgtypename in subsys/net/lib/dhcpv4/dhcpv4.c indexes a static 8-element const char name table after a faulty bounds check. The guard used msgtype = sizeofname instead of msgtype = ARRAYSIZEname; sizeof returns the byte size of the pointer array 32 on 32-bit, 64 ...

CVE-2026-55777

A flaw was found in GoAccess. A remote attacker can craft a malicious User-Agent string in an access log. The parseios function, which processes log data, incorrectly uses an attacker-controlled offset. This can lead to an out-of-bounds heap read, causing the application to crash and resulting in...

CVE-2026-65311

The HTTP server component of ANDRITZ HIPASE-250 formerly 250 SCALA in affected versions exposes an undocumented endpoint that changes the server's logging level and target without requiring authentication. A remote, unauthenticated attacker with network access to the service may suppress audit...

EUVD-2026-51501

The HTTP server component of ANDRITZ HIPASE-250 formerly 250 SCALA in affected versions exposes an undocumented endpoint that changes the server's logging level and target without requiring authentication. A remote, unauthenticated attacker with network access to the service may suppress audit...

Exploit for CVE-2026-67599

OS Command Injection in Log Viewer Filter Parameter Package...

CVE-2026-14554

The Check & Log Email WordPress plugin before 2.0.15 does not properly sanitize and escape parameters before using them in SQL queries, allowing users with administrator privileges to perform SQL injection attacks...

CVE-2026-14554 Check & Log Email < 2.0.15 - Admin+ SQL Injection via d and s Parameters

The Check & Log Email WordPress plugin before 2.0.15 does not properly sanitize and escape parameters before using them in SQL queries, allowing users with administrator privileges to perform SQL injection attacks...

CVE-2026-14554

The CVE-2026-14554 entry concerns the Check & Log Email WordPress plugin (pre-2.0.15). Affected component: SQL query construction where parameters are not properly sanitized/escaped, enabling SQL injection when an attacker has administrator privileges. Impact stated: SQL injection with high confi...

EUVD-2026-51410

The Check & Log Email WordPress plugin before 2.0.15 does not properly sanitize and escape parameters before using them in SQL queries, allowing users with administrator privileges to perform SQL injection attacks...

CVE-2026-43831

Full details and mitigation steps are currently restricted and will be published at a later date...

EUVD-2026-51387

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43831 tbc

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43831

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43831

CVE-2026-43831 has a connected PT-2026-66673 entry describing a stack-based buffer overflow in the log message functionality that can be exploited by an unauthenticated attacker to achieve code execution. The initial documents provide a CVSSv3.1 base score of 7.5 (HIGH) with network attack vector...

IBM Langflow OSS authorization issue vulnerability (CNVD-2026-31200)

IBM Langflow OSS is an open-source low-code visualization AI workflow building tool developed by IBM. It enables developers to quickly build, deploy, and iterate AI agents and RAG applications by dragging and dropping components. Additionally, it supports deep customization using Python to...