24971 matches found
PT-2026-23743
🚨 CVE-2026-30843 Wekan is an open source kanban tool built with Meteor. Versions 8.32 and 8.33 have a critical Insecure Direct Object Reference IDOR issue which could allow unauthorized users to modify custom fields across boards through its custom fields update endpoints, potentially leading to...
PT-2026-30182
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contained a use-after-free issue within the nd async device register function during asynchronous initialization. This occurred when device add failed, leading to a drop...
Amazon Linux 2 : python-pillow, --advisory ALAS2-2026-3180 (ALAS-2026-3180)
The version of python-pillow installed on the remote host is prior to 2.0.0-23.gitd1c6db8. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3180 advisory. Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, n out-of-bounds write may be triggered when...
web-pentest-cases
Web Application Pentesting Cases Practical web application se...
ECHO-D2D4-4737-F820
Bulletin has no description...
MINI-GMC5-XX4G-94MC
Bulletin has no description...
MINI-254M-P347-3H24
Bulletin has no description...
CVE-2025-40931
creationtimestamp| type| source ---|---|--- 2026-03-05 05:52:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgc47exiq22x 2026-03-05 10:03:11+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mgck7octeq2a 2026-03-05 19:16:44+00:00| seen|...
CVE-2026-29121
International Data Casting IDC SFX2100 satellite receiver comes with the /sbin/ip utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005779)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005779 advisory. In the Linux kernel, the following vulnerability has been resolved: macintosh: fix possible memory leak in macioaddonedevice Afer commit 1fa5ae857bb1 driver core: ge...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005785)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005785 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6/addrconf: fix a potential refcount underflow for idev Now in addrconfmodrstimer, reference...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005715)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005715 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev/ep93xx-fb: Do not assign to struct fbinfo.dev Do not assing the Linux device to struct...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005678)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005678 advisory. In the Linux kernel, the following vulnerability has been resolved: software node: Correct a OOB check in softwarenodegetreferenceargs softwarenodegetreferenceargs...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005769)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005769 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: fslmqs: move ofnodeput to the correct location ofnodeput should have been done directly...
CVE-2026-30224
creationtimestamp| type| source ---|---|--- 2026-03-04 23:37:39+00:00| published-proof-of-concept| https://github.com/OliveTin/OliveTin/security/advisories/GHSA-gq2m-77hf-vwgh 2026-03-06 23:20:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgghap6dvj2e...
CVE-2026-27802
A flaw was found in Vaultwarden. A manager, an authorized user, can exploit this vulnerability by performing a bulk permission update to collections they are not authorized to access. This can lead to privilege escalation, allowing the manager to gain unauthorized access and control over these...
GHSA-CRMG-9M86-636R
creationtimestamp| type| source ---|---|--- 2026-03-04 20:40:05+00:00| seen| https://gist.github.com/alon710/5abfd0895f336caec9a21c626e6bdcf3...
CVE-2026-28782 Craft has a Permission Bypass and IDOR in Duplicate Entry Action
Craft is a content management system CMS. Prior to 5.9.0-beta.1 and 4.17.0-beta.1, the "Duplicate" entry action does not properly verify if the user has permission to perform this action on the specific target elements. Even with only "View Entries" permission where the "Duplicate" action is...