CVE-2023-47268

In libslic3r/GCode/PostProcessor.cpp in Prusa PrusaSlicer through 2.6.1, a crafted 3mf project file can execute arbitrary code on a host where the project is sliced and G-code exported...

Gitroom Postiz 跨站脚本漏洞

Gitroom Postiz is an open-source social media scheduling tool developed by Gitroom. Versions of Gitroom Postiz from 2.21.6 to 2.21.7 contained a cross-site scripting vulnerability. This vulnerability allowed any authenticated user to store arbitrary HTML in post content by manipulating saved...

PT-2026-38672

Name of the Vulnerable Software and Affected Versions Netgate pfSense CE version 2.7.2 Description Netgate pfSense CE allows code execution through the module installer. This occurs when a backup file containing a serialized PHP object with the post reboot commands property is used. Recommendatio...

CVE-2025-69690

Netgate pfSense Community Edition 2.7.2 and 2.8.0 are affected by two authenticated RCE paths. First, unsafe deserialization in the module installer/backups allows a crafted backup XML containing a serialized PHP object with the post_reboot_commands property to execute commands with root privileg...

Linux Distros Unpatched Vulnerability : CVE-2026-43294

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm: renesas: rz-du: mipidsi: fix kernel panic when rebooting for some panels Since commit 56de5e305d4b clk: renesas: r9a07g044: Add MSTOP for RZ/G2L we may get...

CVE-2025-69690

Netgate pfSense CE 2.7.2 allows code execution by using the module installer with a backup file with a serialized PHP object containing the postrebootcommands property. NOTE: the Supplier disputes this because this installer is only available to admins and they are intentionally allowed to execut...

CVE-2024-30167

/cgi-bin/time.cgi in Atlona AT-OME-MS42 Matrix Switcher 1.1.2 allow remote authenticated users to execute arbitrary commands as root via a POST request that carries a serverName parameter...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the xprtrdma component failing to decrement ep-rereceiving when rpcrdmapostrecvs fails or exits...

CVE-2024-30167

/cgi-bin/time.cgi in Atlona AT-OME-MS42 Matrix Switcher 1.1.2 allow remote authenticated users to execute arbitrary commands as root via a POST request that carries a serverName parameter...

CVE-2026-44574

creationtimestamp| type| source ---|---|--- 2026-05-07 23:40:51+00:00| seen| https://bsky.app/profile/securestep9.bsky.social/post/3mlcfbrg7m62h 2026-05-08 03:00:06+00:00| seen| Telegram/xvoYgOFnUf5jFw65bW2FC7fcn6orx4l4LTjm0d68ZkOEzo 2026-05-08 12:09:44+00:00| seen|...

CVE-2026-3781

creationtimestamp| type| source ---|---|--- 2026-05-07 23:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlcetvt4ib2s...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Hp Power_Manager

As part of my OSCP preparation I came across CVE-2009-3999 HP P...

CVE-2026-35428

creationtimestamp| type| source ---|---|--- 2026-05-07 23:07:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlcdgqsfzt2f 2026-05-07 23:55:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcg4q27wp2c 2026-05-08 06:00:28+00:00| seen|...

CVE-2026-34327

creationtimestamp| type| source ---|---|--- 2026-05-07 23:07:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlcdgizqaa2l 2026-05-07 23:39:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcf7ydo2h2e 2026-05-09 01:07:07+00:00| seen|...

CVE-2026-33111

creationtimestamp| type| source ---|---|--- 2026-05-07 23:06:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlcddyranj2w 2026-05-12 16:38:43+00:00| seen| https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review 2026-05-13 01:08:48+00:00| seen|...

CVE-2026-33109

creationtimestamp| type| source ---|---|--- 2026-05-07 23:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlcczwywij2t 2026-05-07 23:34:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcewzlg7s2k 2026-05-09 02:48:37+00:00| seen|...

CVE-2026-41929

Vvveb before 1.0.8.2 contains an unauthenticated reflected cross-site scripting vulnerability in the visual editor preview renderer that allows attackers to execute arbitrary JavaScript by manipulating the r query parameter and componentajax POST parameter. Attackers can craft a malicious link or...

CVE-2026-39819

creationtimestamp| type| source ---|---|--- 2026-05-07 21:52:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlc7a4vlnj2p...

CVE-2026-42047

creationtimestamp| type| source ---|---|--- 2026-05-07 21:51:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlc75oykjj2z 2026-05-08 00:00:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcgfqfolk2h 2026-07-13 11:37:06+00:00| seen|...

CVE-2026-39825

creationtimestamp| type| source ---|---|--- 2026-05-07 21:39:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlc6iqnnmj2k 2026-05-08 12:01:19+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mldont6nxo22...