41626 matches found
CVE-2026-7841 GV-ASWeb Remote Code Execution (RCE) vulnerability
A remote code execution vulnerability exists in Notification Settings on GeoVision GV-ASWeb 6.2.0. An authenticated user with System Setting permissions can execute arbitrary commands on the server by sending a crafted HTTP POST request to the ASWebCommon.srf backend endpoint to bypass the fronte...
CVE-2026-7841
A remote code execution vulnerability exists in Notification Settings on GeoVision GV-ASWeb 6.2.0. An authenticated user with System Setting permissions can execute arbitrary commands on the server by sending a crafted HTTP POST request to the ASWebCommon.srf backend endpoint to bypass the fronte...
CVE-2026-3208
creationtimestamp| type| source ---|---|--- 2026-05-06 05:49:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5yxgbxae2c 2026-05-06 11:23:36+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3ml6lmka4fb2c 2026-05-09 00:33:06+00:00| seen|...
CVE-2026-5111
creationtimestamp| type| source ---|---|--- 2026-05-06 03:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3ml5rd76lcn24...
CVE-2025-71256
creationtimestamp| type| source ---|---|--- 2026-05-06 02:54:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml5p5ipdlj2k 2026-05-06 05:33:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5y2ok74h2t 2026-06-01 18:00:00+00:00| seen|...
CVE-2026-43646
creationtimestamp| type| source ---|---|--- 2026-05-06 02:07:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ml5mkh2nvi25 2026-05-06 17:10:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml76yfunya2r...
CVE-2026-44405
creationtimestamp| type| source ---|---|--- 2026-05-06 01:33:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5kngm5vb2i...
CVE-2026-41950
creationtimestamp| type| source ---|---|--- 2026-05-06 01:21:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5jyljkm52e 2026-07-13 13:00:07+00:00| seen| https://t.me/truesecator/8341 2026-07-14 00:00:44+00:00| seen| https://t.me/truesecator/8341...
CVE-2026-39852
creationtimestamp| type| source ---|---|--- 2026-05-06 01:19:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5jug4xzc2p 2026-08-05 16:42:33+00:00| seen| https://bsky.app/profile/endoflife.ai/post/3msdxuocqot2p...
CVE-2026-34473
Unauthenticated DoS in ZTE H8102E, H168N, H167A, H199A, H288A, H198A, H267A, H267N, H268A, H388X, H196A, H369A, H268N, H208N, H367N, H181A, and H196Q. A denial-of-service condition can be triggered against the router's web interface by sending an oversized application/x-www-form-urlencoded POST...
PT-2026-38300
Name of the Vulnerable Software and Affected Versions Lemur versions prior to 1.9.0 Description The LDAP authentication module lemur/auth/ldap.py constructs LDAP search filters using unsanitized user input via Python string interpolation. An authenticated LDAP user can inject LDAP filter...
PT-2026-37514
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the io uring/zcrx component where closing a queue does not guarantee the immediate termination of all associated page pools. The system incorrectly releases the zcrx...
PT-2026-38283
Name of the Vulnerable Software and Affected Versions Grav form plugin versions prior to 9.1.0 Description An unauthenticated page-content overwrite exists via file upload. The file upload handler in user/plugins/form/classes/Form.php uses a filename parameter that can be controlled via POST...
ZTE多款产品 资源管理错误漏洞
ZTE H196Q is a product of China's ZTE Corporation. The ZTE H196Q is a network device. The ZTE H168N is a router. The ZTE H388X is a modem. Several ZTE products have a resource management vulnerability; this vulnerability arises from sending overly large POST request bodies in the...
CVE-2026-34473
CVE-2026-34473: Unauthenticated DoS affecting ZTE router models including H8102E, H168N, H167A, H199A, H288A, H198A, H267A, H267N, H268A, H388X, H196A, H369A, H268N, H208N, H367N, H181A, and H196Q. According to connected documents, an oversized application/x-www-form-urlencoded POST body can trig...
CVE-2026-34473
Unauthenticated DoS in ZTE H8102E, H168N, H167A, H199A, H288A, H198A, H267A, H267N, H268A, H388X, H196A, H369A, H268N, H208N, H367N, H181A, and H196Q. A denial-of-service condition can be triggered against the router's web interface by sending an oversized application/x-www-form-urlencoded POST...
PT-2026-37354
A remote code execution vulnerability exists in Notification Settings on GeoVision GV-ASWeb 6.2.0. An authenticated user with System Setting permissions can execute arbitrary commands on the server by sending a crafted HTTP POST request to the ASWebCommon.srf backend endpoint to bypass the fronte...
PT-2026-38217
Name of the Vulnerable Software and Affected Versions ZTE H8102E affected versions not specified ZTE H168N affected versions not specified ZTE H167A affected versions not specified ZTE H199A affected versions not specified ZTE H288A affected versions not specified ZTE H198A affected versions not...
Linux Distros Unpatched Vulnerability : CVE-2026-7412
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, the Operation Delegation feature fails to validate the destination URI of delegated...