CISCO-SA-20161102-TP

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:17+00:00| seen| https://t.me/informationsec/1437 2026-08-23 00:00:36+00:00| seen| https://t.me/informationsec/1437...

CISCO-SA-20161026-LINUX

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:17+00:00| seen| https://t.me/informationsec/1437 2026-08-23 00:00:36+00:00| seen| https://t.me/informationsec/1437...

CISCO-SA-20170124-WEBEX

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:16+00:00| seen| https://t.me/informationsec/1610 2026-08-23 00:00:36+00:00| seen| https://t.me/informationsec/1610...

CISCO-SA-20170125-TELEPRESENCE

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:16+00:00| seen| https://t.me/informationsec/1610 2026-08-23 00:00:36+00:00| seen| https://t.me/informationsec/1610...

CVE-2018-10070

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:16+00:00| seen| https://t.me/informationsec/2627 2026-08-22 14:00:16+00:00| seen| https://t.me/informationsec/2626 2026-08-23 00:00:37+00:00| published-proof-of-concept| https://t.me/informationsec/2626 2026-08-23 00:00:37+00:00|...

CISCO-SA-20170125-CAS

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:16+00:00| seen| https://t.me/informationsec/1610 2026-08-23 00:00:36+00:00| seen| https://t.me/informationsec/1610...

CISCO-SA-20170125-EXPRESSWAY

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:16+00:00| seen| https://t.me/informationsec/1610 2026-08-23 00:00:36+00:00| seen| https://t.me/informationsec/1610...

CISCO-SA-20180328-SMI

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:16+00:00| seen| https://t.me/informationsec/2591 2026-08-23 00:00:37+00:00| seen| https://t.me/informationsec/2591...

GHSA-R5PQ-6CHH-J3XP

creationtimestamp| type| source ---|---|--- 2026-08-22 12:31:57+00:00| seen| https://gist.github.com/alon710/31e18879d387aa16512f599cadd2f7a1...

XWiki Platform - Path Traversal

XWiki Platform 4.2-milestone-2 through 16.10.6 contains a path traversal caused by improper access control in jsx and sx endpoints, letting remote attackers read configuration files, exploit requires no special privileges. id: CVE-2025-55748 info: name: XWiki Platform - Path Traversal author:...

FOG Project < 1.5.10.34 - Remote Command Execution

FOG is a cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.34, packages/web/lib/fog/reportmaker.class.php in FOG was affected by a command injection via the filename parameter to /fog/management/export.php. id: CVE-2024-39914 info: name: FOG Project 1.5.10.34 - Remote...

QNAP Music Station < 5.4.0 - Authentication Bypass

An improper authentication vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following version: Music Station 5.4.0 and later id:...

JumpServer - Open Redirect via Referer Header

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to v3.10.19 and v4.10.5, The /core/i18n// endpoint uses the Referer header as the redirection target without proper validation, which could lead to an Open Redirect vulnerability. id:...

FUXA <= 1.2.7 - Hardcoded JWT Secret Authentication Bypass

FUXA v1.2.7 contains a hardcoded credentials vulnerability caused by use of a hard-coded secret key in server/api/jwt-helper.js, letting remote attackers forge admin tokens and bypass authentication, exploit requires no special conditions. id: CVE-2025-69971 info: name: FUXA = 1.2.7 - Hardcoded J...

Apache ActiveMQ 6.x < 6.1.2 - Broken Access Control

Apache ActiveMQ 6.x contains an unauthenticated API web context caused by default configuration lacking security measures in the Jetty server, letting anyone interact with broker APIs and messaging layers, exploit requires no authentication. id: CVE-2024-32114 info: name: Apache ActiveMQ 6.x 6.1....

Apache Struts2 S2-062 - Remote Code Execution

Apache Struts2 S2-062 is vulnerable to remote code execution. The fix issued for CVE-2020-17530 S2-061 was incomplete, meaning some of the tag's attributes could still perform a double evaluation if a developer applied forced OGNL evaluation by using the %... syntax. id: CVE-2021-31805 info: name...

Java-springboot-codebase 1.1 - Arbitrary File Read

OsamaTaher/Java-springboot-codebase is a collection of Java and Spring Boot code snippets, applications, and projects. Prior to commit c835c6f7799eacada4c0fc77e0816f250af01ad2, insufficient path traversal mechanisms make absolute path traversal possible. This vulnerability allows unauthorized...

SiYuan <= v3.6.1 - Bookmark Data Disclosure

SiYuan v3.6.2 contains an information disclosure vulnerability caused by improper authorization checks in the publish service's bookmark filtering, letting unauthenticated visitors access bookmarked blocks from password-protected documents, exploit requires access to the publish service. id:...

Dify User Enumeration via Observable Response Discrepancy

Dify is an open-source LLM app development platform. Prior to 1.9.0, responses from the Dify API to existing and non-existent accounts differ, allowing an attacker to enumerate email addresses registered with Dify. Version 1.9.0 fixes the issue. id: CVE-2026-28288 info: name: Dify User Enumeratio...

Vite dev server - Cross-Site Scripting

Vite's dev server, when used with appType: 'custom' and manually invoking server.transformIndexHtml using the unmodified request URL, is vulnerable to XSS via a crafted URL payload. If the HTML being served includes an inline module script ..., an attacker can inject a script via the URL,...