EUVD-2026-70279

A flaw has been found in sigoden aichat up to 0.30.4. This affects an unknown function of the file src/serve.rs of the component API Endpoint. This manipulation causes uncontrolled memory allocation. The attack can be initiated remotely. The exploit has been published and may be used. The vendor...

DRUPAL-CONTRIB-2026-132

This module creates permissions per node content type to control access to unpublished content. The module has allowed view access for published content, overriding other access mechanisms that might have been in place...

CVE-2026-81724

creationtimestamp| type| source ---|---|--- 2026-09-02 16:35:53+00:00| published-proof-of-concept| https://github.com/nltk/nltk/security/advisories/GHSA-cw6x-m8jw-qmrh...

CVE-2026-71492

creationtimestamp| type| source ---|---|--- 2026-09-02 16:35:33+00:00| published-proof-of-concept| https://github.com/masci/banks/security/advisories/GHSA-x8wg-4xgc-vr54...

SiYuan: SQL Query in Block Search Exposes Hidden Published Document Content

Summary Siyuan's block search endpoint concatenates attacker-controlled paths values into SQL predicates used by non-SQL search modes. Through Siyuan's publish service, an unauthenticated visitor is forwarded to the kernel with a reader-role token and can reach POST /api/search/fullTextSearchBloc...

CVE-2024-4253

creationtimestamp| type| source ---|---|--- 2026-09-02 14:00:04+00:00| published-proof-of-concept| Telegram/Ksw2WSufgZzZKAWcQpJTvjLIU1b4CHsBIzgYQ-ZNPfik 2026-09-03 00:00:46+00:00| published-proof-of-concept| Telegram/Ksw2WSufgZzZKAWcQpJTvjLIU1b4CHsBIzgYQ-ZNPfik...

CVE-2026-31321

creationtimestamp| type| source ---|---|--- 2026-09-02 01:00:04+00:00| published-proof-of-concept| Telegram/yppx2WWa40cV5hBHui4bTL2VMdAtcaI4VaugdhOfmt8Lg 2026-09-03 00:01:00+00:00| published-proof-of-concept| Telegram/yppx2WWa40cV5hBHui4bTL2VMdAtcaI4VaugdhOfmt8Lg...

CVE-2026-36130

creationtimestamp| type| source ---|---|--- 2026-09-02 01:00:04+00:00| published-proof-of-concept| Telegram/yppx2WWa40cV5hBHui4bTL2VMdAtcaI4VaugdhOfmt8Lg 2026-09-03 00:01:00+00:00| published-proof-of-concept| Telegram/yppx2WWa40cV5hBHui4bTL2VMdAtcaI4VaugdhOfmt8Lg...

PT-2026-86216

CVE ID :CVE-2026-23588 Published : Sept. 2, 2026, 7:52 a.m. | 19 minutes ago Description :None Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

EUVD-2026-69699

A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is some unknown functionality of the file gateway/platforms/apiserver.py of the component Session Chat Interface. This manipulation causes denial of service. The attack is possible to be carried out remotely. The...

CVE-2026-84287 NousResearch hermes-agent Session Chat api_server.py denial of service

A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is some unknown functionality of the file gateway/platforms/apiserver.py of the component Session Chat Interface. This manipulation causes denial of service. The attack is possible to be carried out remotely. The...

CVE-2026-84287 NousResearch hermes-agent Session Chat api_server.py denial of service

A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is some unknown functionality of the file gateway/platforms/apiserver.py of the component Session Chat Interface. This manipulation causes denial of service. The attack is possible to be carried out remotely. The...

CVE-2026-68948

creationtimestamp| type| source ---|---|--- 2026-09-01 20:35:23+00:00| published-proof-of-concept| https://github.com/axios/axios/security/advisories/GHSA-mwf2-3pr3-8698...

CVE-2026-68947

creationtimestamp| type| source ---|---|--- 2026-09-01 20:35:21+00:00| published-proof-of-concept| https://github.com/axios/axios/security/advisories/GHSA-jqh4-m9w3-8hp9...

CVE-2026-18401

creationtimestamp| type| source ---|---|--- 2026-09-01 20:35:07+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-72hv-8253-57qq...

CVE-2026-73089

creationtimestamp| type| source ---|---|--- 2026-09-01 18:35:04+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-c83g-rgw3-j3cx 2026-09-05 16:13:11+00:00| seen| https://gist.github.com/djlan/e3b6762435f262eb64ea25ec3f8c9d82 2026-09-05 16:19:59+00:00| seen|...

CVE-2026-84111

A flaw has been found in Chanjet CRM up to 20260707. This issue affects some unknown processing of the file jxfdumptable.php. This manipulation of the argument gblOrgID causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor...

CVE-2026-84200

creationtimestamp| type| source ---|---|--- 2026-09-01 12:48:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/64xwwmhlajzwr 2026-09-01 13:00:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muhhzphk7q2d 2026-09-01 14:07:37+00:00| seen|...

EUVD-2026-69012

A flaw has been found in ICP DAS UA-2200 and UA-5200 up to 20260704. The affected element is the function ArmAngstromInstructionSet of the file /CGI?RestApi=SetHostname. Executing a manipulation of the argument ParameterArray can lead to command injection. The attack can be executed remotely. The...

VulnCheck KEV: CVE-2026-5153

A flaw has been found in Tenda CH22 1.0.0.1. The affected element is the function FormWriteFacMac of the file /goform/WriteFacMac. Executing a manipulation of the argument mac can lead to command injection. The attack may be launched remotely. The exploit has been published and may be used...