Lucene search
+L

23929 matches found

The Hacker News
The Hacker News
•added 2026/01/16 10:42 a.m.•21 views

Your Digital Footprint Can Lead Right to Your Front Door

You lock your doors at night. You avoid sketchy phone calls. You're careful about what you post on social media. But what about the information about you that's already out there—without your permission? Your name. Home address. Phone number. Past jobs. Family members. Old usernames. It's all sti...

6.8AI score
SaveExploits0
EUVD
EUVD
•added 2026/01/16 10:12 a.m.•27 views

EUVD-2026-2950

HCL MyXalytics v6.7 is affected by improper management of a static JWT signing secret in the web application, where the secret lacks rotation , introducing a security risk...

7.4CVSS5.9AI score0.00275EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/01/16 8:39 a.m.•22 views

EUVD-2026-2965

There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X13SEM-F . An attacker can update the system firmware with a specially crafted image...

7.2CVSS6.4AI score0.00131EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/01/16 8:39 a.m.•23 views

EUVD-2026-2933

Remote command injection vulnerability in heap profiler builtin service in Apache bRPC all versions 1.15.0 on all platforms allows attacker to inject remote command. Root Cause: The bRPC heap profiler built-in service /pprof/heap does not validate the user-provided extraoptions parameter and...

9.8CVSS8.9AI score0.25711EPSS
SaveExploits3References3
EUVD
EUVD
•added 2026/01/16 4:44 a.m.•20 views

EUVD-2026-2972

The MailerLite - WooCommerce integration plugin for WordPress is vulnerable to unauthorized data modification and deletion in all versions up to, and including, 3.1.3. This is due to missing capability checks on the resetIntegration function. This makes it possible for authenticated attackers, wi...

6.5CVSS4.8AI score0.00333EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/01/16 2:48 a.m.•21 views

EUVD-2026-2984

Police Statistics Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents by using a specific functionality...

9.8CVSS5.8AI score0.00525EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/01/16 12:30 a.m.•19 views

EUVD-2026-3015

EUVD-2026-3015...

9.8CVSS8.3AI score0.00902EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/01/16 12:30 a.m.•19 views

EUVD-2026-3000

EUVD-2026-3000...

8.5CVSS5.8AI score0.00227EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2026/01/16 12:00 a.m.•9 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001392)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001392 advisory. An issue was discovered in the Linux kernel through 4.18.8. The vmacacheflushall function in mm/vmacache.c mishandles sequence number overflows. An attacker can...

7.8CVSS7.2AI score0.03206EPSS
SaveExploits5References4
EUVD
EUVD
•added 2026/01/16 12:00 a.m.•18 views

EUVD-2026-2873

An issue was discovered in Chamillo LMS 1.11.2. The Social Network /personaldata endpoint exposes full sensitive user information even after logout because proper cache-control is missing. Using the browser back button restores all personal data, allowing unauthorized users on the same device to...

7.5CVSS5.8AI score0.00238EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
•added 2026/01/16 12:00 a.m.•23 views

MiracleLinux 3 : drupal-6.30-1.AXS3 (AXSA:2014-234:01)

The remote MiracleLinux 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2014-234:01 advisory. Drupal is a free software package that allows an individual or a community of users to easily publish, manage and organize a wide variety of content ...

7.5CVSS6.9AI score0.03072EPSS
SaveExploits0References4
Circl
Circl
•added 2026/01/15 2:03 p.m.•23 views

CVE-2026-22913

creationtimestamp| type| source ---|---|--- 2026-01-15 14:03:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mchqs3uhuv2c 2026-01-15 15:12:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115899757567671679...

6.1CVSS5.7AI score0.00387EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/01/15 1:13 p.m.•13 views

CVE-2026-22642

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

5.2AI score0.00036EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/01/15 1:10 p.m.•25 views

EUVD-2026-2826

An open redirect vulnerability has been identified in Grafana OSS that can be exploited to achieve XSS attacks. The vulnerability was introduced in Grafana v11.5.0. The open redirect can be chained with path traversal vulnerabilities to achieve XSS. Fixed in versions 12.0.2+security-01,...

7.6CVSS5.9AI score0.00046EPSS
SaveExploits0References7
Microsoft CVE
Microsoft CVE
•added 2026/01/15 9:05 a.m.•16 views

net: hns3: using the num_tqps in the vf driver to apply for resources

...

7AI score0.00234EPSS
SaveExploits0
osv_bell
osv_bell
•added 2026/01/15 6:07 a.m.•12 views

BELL-CVE-2025-68819

Bulletin has no description...

7.8CVSS6.5AI score0.00155EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/01/15 12:00 a.m.•9 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003224)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003224 advisory. Linux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86 committed on April 14,...

7.8CVSS6.6AI score0.10695EPSS
SaveExploits5References17
Oracle linux
Oracle linux
•added 2026/01/15 12:00 a.m.•20 views

transfig security update

1:3.2.7b-11 - Detect nan in spline control values - CVE-2025-46397...

7.8CVSS6.3AI score0.00305EPSS
SaveExploits1
CNNVD
CNNVD
•added 2026/01/15 12:00 a.m.•28 views

Number withdrawal

“ring” is a library developed by Brian Smith as an individual contributor. This CVE number has been withdrawn...

5.7AI score0.00079EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/01/15 12:00 a.m.•33 views

Number withdrawal

“ring” is a library developed by Brian Smith as an individual contributor. This CVE number has been withdrawn...

5.7AI score0.00038EPSS
SaveExploits0References6
Rows per page
Query Builder