CVE-2026-7092

A vulnerability has been found in code-projects Invoice System in Laravel 1.0. Affected is an unknown function of the file /profile/ of the component Profile Handler. Such manipulation of the argument ID leads to improper authorization. The attack can be executed remotely. The exploit has been...

CVE-2026-7106

The Highland Software Custom Role Manager plugin for WordPress is vulnerable to Privilege Escalation in versions up to and including 1.0.0. This is due to insufficient authorization checks in the hscrmsaveuserroles function, which is hooked to the personaloptionsupdate action accessible by any...

CVE-2026-42521

creationtimestamp| type| source ---|---|--- 2026-04-29 14:35:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknd2fatm72q...

CVE-2026-42522

creationtimestamp| type| source ---|---|--- 2026-04-29 14:29:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkncqtsprg2i...

CVE-2026-7274

creationtimestamp| type| source ---|---|--- 2026-04-29 12:50:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkn56yjc7r2m 2026-05-12 16:46:39+00:00| seen| https://vulnerability.circl.lu/bundle/20100033-b137-47a0-b98c-568c18deda5a...

CVE-2026-7276

creationtimestamp| type| source ---|---|--- 2026-04-29 12:50:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkn56yjc7r2m 2026-05-12 16:46:39+00:00| seen| https://vulnerability.circl.lu/bundle/20100033-b137-47a0-b98c-568c18deda5a...

CVE-2026-42412

creationtimestamp| type| source ---|---|--- 2026-04-29 10:38:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkmvtgppe32t 2026-05-19 11:32:11+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mm7c5tys652h...

CVE-2025-10503

creationtimestamp| type| source ---|---|--- 2026-04-29 10:27:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkmv737e3m2o...

CVE-2026-42514

creationtimestamp| type| source ---|---|--- 2026-04-29 10:24:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkmuzp73go2p...

CVE-2026-42377

creationtimestamp| type| source ---|---|--- 2026-04-29 10:21:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkmuusrnss2i 2026-04-29 10:56:42+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mkmwtyllsu2w...

CVE-2026-6276

creationtimestamp| type| source ---|---|--- 2026-04-29 07:00:59+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkmjoj7gm52b 2026-04-29 12:45:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkn4vufiap2k...

CVE-2026-41649

creationtimestamp| type| source ---|---|--- 2026-04-29 01:00:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mklvjyqmg22w...

UTT HiPER 1250GW 缓冲区错误漏洞

UTT HiPER 1250GW is a wireless gateway device developed by UTT Corporation. Versions of UTT HiPER 1250GW prior to 3.2.7-210907-180535 contained a buffer overflow vulnerability. This vulnerability stemmed from an operation in the function strcpy within the file route/goform/ConfigAdvideo, where th...

PT-2026-37144

Name of the Vulnerable Software and Affected Versions Admidio versions prior to 5.0.9 Description A logic error in the two-factor authentication 2FA reset process inverts the authorization check. This allows non-admin users to remove the Time-based One-Time Password TOTP configuration of other...

PT-2026-36022

Name of the Vulnerable Software and Affected Versions UTT HiPER 1250GW versions prior to 3.2.7-210907-180535 Description A buffer overflow exists in the strcpy function within the 'route/goform/ConfigAdvideo' file. This issue allows a remote attacker to trigger the flaw by manipulating the Profil...

UTT HiPER 1250GW 缓冲区错误漏洞

UTT HiPER 1250GW is a wireless gateway device developed by UTT Corporation. Versions of UTT HiPER 1250GW prior to 3.2.7-210907-180535 contained a buffer overflow vulnerability. This vulnerability stemmed from an operation in the function strcopy within the file route/goform/NTP, where the Profile...

WordPress plugin BuddyPress Xprofile Custom Fields Type 路径遍历漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

PT-2026-36020

Name of the Vulnerable Software and Affected Versions UTT HiPER 1250GW versions prior to 3.2.7-210907-180535 Description A buffer overflow can be triggered remotely via the strcpy function within the file route/goform/NTP. This occurs when the Profile argument is manipulated. Recommendations Upda...

KLA91016 Multiple vulnerabilities in Wireshark

Multiple vulnerabilities were found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A denial of service vulnerability in Monero protocol dissector can be exploited to cause a denial...

UTT HiPER 1250GW 缓冲区错误漏洞

UTT HiPER 1250GW is a wireless gateway device developed by UTT Corporation. Versions of UTT HiPER 1250GW prior to 3.2.7-210907-180535 contained a buffer overflow vulnerability. This vulnerability stemmed from an operation involving the parameter “Profile” in the function strcpy within the file...