50489 matches found
CVE-2026-52832: Improper Limitation of a Pathname to a Restricted Directory
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.5, Nuclio Dashboard exposes POST /api/functions without authentication by default NOP auth mode. The spec.handler field e.g., mymodule:myfunction is parsed by functionconfig.ParseHandler which split...
CVE-2026-83551
creationtimestamp| type| source ---|---|--- 2026-09-01 23:20:10+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3muikoiggdb2q 2026-09-03 20:32:45+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3muncay5iri2q...
CVE-2026-84477
AVideo Liveschedule::setTitle and setDescription store POST input without sanitization, allowing users with streaming permission to inject malicious scripts. Unauthenticated attackers can access remindMe.php to execute stored XSS payloads in victim browsers without requiring authentication...
GHSA-VX62-CVR5-X3P4
creationtimestamp| type| source ---|---|--- 2026-09-01 22:49:21+00:00| seen| https://bsky.app/profile/glitterbean.wehavecookies.social.ap.brid.gy/post/3muiixdyp63p2...
CVE-2026-84477
AVideo is vulnerable to a stored XSS in its live scheduling feature. The functions Live_schedule::setTitle() and setDescription() store POST input without sanitization, allowing users with streaming permission to inject malicious scripts. Unauthenticated attackers can subsequently access remindMe...
CVE-2026-84477 AVideo Stored XSS via Live Schedule Title Description
AVideo Liveschedule::setTitle and setDescription store POST input without sanitization, allowing users with streaming permission to inject malicious scripts. Unauthenticated attackers can access remindMe.php to execute stored XSS payloads in victim browsers without requiring authentication...
CVE-2026-83549
Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to...
CVE-2026-73749
creationtimestamp| type| source ---|---|--- 2026-09-01 22:07:39+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muigmtjksk2w 2026-09-02 13:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muk26cfgl72y 2026-09-03 01:58:25+00:00| seen|...
CVE-2026-83549
Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to...
CVE-2026-83549
A post-authentication OS Command Injection vulnerability exists in the SonicWall SMA1000 Appliance Management Console (AMC) . This flaw allows a remote authenticated attacker with administrator privileges to execute arbitrary OS commands, leading to remote code execution . The vulnerability is ac...
CVE-2026-83549
Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to...
CVE-2026-19132
creationtimestamp| type| source ---|---|--- 2026-09-01 20:35:51+00:00| seen| https://bsky.app/profile/ctsd-gmbh.bsky.social/post/3muibinnnqh2n...
CVE-2026-12661
creationtimestamp| type| source ---|---|--- 2026-09-01 20:15:10+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3muiadpcugc2w 2026-09-02 12:45:02+00:00| seen| https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-rockwell-automation...
CVE-2020-15948
creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:30+00:00| seen| https://t.me/hackingAttack/18075 2026-09-02 01:03:05+00:00| seen| https://t.me/hackingAttack/18075 2026-09-07 22:00:06+00:00| published-proof-of-concept| https://t.me/hackingAttack/18075 2026-09-08 00:00:11+00:00|...
GHSA-GQVG-GMMX-X4HM
creationtimestamp| type| source ---|---|--- 2026-09-01 18:29:48+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mui2hbc2xl2k 2026-09-01 18:29:49+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mui2hc6ac22j...
CVE-2026-84203
creationtimestamp| type| source ---|---|--- 2026-09-01 17:00:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4vrr63jcuywb5...
CVE-2026-83619
creationtimestamp| type| source ---|---|--- 2026-09-01 16:42:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/63lwwxae36rgq 2026-09-08 22:35:30+00:00| published-proof-of-concept| https://github.com/xmldom/xmldom/security/advisories/GHSA-x4fp-j954-r2f4...
CVE-2026-79676
creationtimestamp| type| source ---|---|--- 2026-09-01 16:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3muhu5rfqm52l...