221 matches found
EUVD-2026-2620
EUVD-2026-2620...
EUVD-2026-2112
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...
EUVD-2026-2302
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbdtreeconnectput under concurrency Under high concurrency, A tree-connection object tcon is freed on a disconnect path while another path still holds a reference and later executes put/write on it...
EUVD-2026-2217
An authentication bypass vulnerability in the Tongyu AX1800 Wi-Fi 6 Router with firmware 1.0.0 allows unauthenticated network-adjacent attackers to perform arbitrary configuration changes without providing credentials, as long as a valid admin session is active. This can result in full compromise...
EUVD-2026-2262
phpgurukul News Portal Project V4.1 is vulnerable to SQL Injection in checkavailablity.php...
EUVD-2026-1904
A weakness has been identified in UTT 进取 520W 1.7.7-180627. Affected is the function strcpy of the file /goform/APSecurity. Executing a manipulation of the argument wepkey1 can lead to buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and...
GHSA-PCWC-3FW3-8CQV
creationtimestamp| type| source ---|---|--- 2026-01-10 05:03:11+00:00| seen| Telegram/Oq5Ood4NSq2MjX-UETlnapDxCUgYA-dHZPJgTTRAs320 2026-01-24 21:25:58+00:00| seen| https://gist.github.com/alon710/caa5cb4168284b12971dd626b93e298b 2026-01-24 21:26:07+00:00| seen|...
EUVD-2026-1275
The Page Keys plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘pagekey’ parameter in all versions up to, and including, 1.3.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, ...
EUVD-2026-1291
The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.9. This is due to inverted nonce verification logic in the ampthemeajaxcomments AJAX handler, which rejects requests with VALID nonces and accepts...
EUVD-2026-0972
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch...
EUVD-2026-0876
Authorization Bypass Through User-Controlled Key vulnerability in Rustaurius Five Star Restaurant Reservations allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Five Star Restaurant Reservations: from n/a through 2.7.8...
Improper Control of Interaction Frequency
Overview django-phone-verify is an A Django app to support phone number verification using security code sent via SMS. Affected versions of this package are vulnerable to Improper Control of Interaction Frequency due to the absence of failed attempt tracking and lockout mechanisms in the...
EUVD-2025-205309
Devolo dLAN 500 AV Wireless+ 3.1.0-1 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without proper request validation. Attackers can craft malicious web pages that trigger unauthorized configuration changes by exploiting predictable URL...
EUVD-2025-205157
In the Linux kernel, the following vulnerability has been resolved: binder: fix memory leak in binderinit In binderinit, the destruction of binderallocshrinkerinit is not performed in the wrong path, which will cause memory leaks. So this commit introduces binderallocshrinkerexit and calls it in...
CGA-8J8W-V9XF-GFR9
Bulletin has no description...
EUVD-2025-204810
Hugging Face smolagents Remote Python Executor Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face smolagents. Authentication is not required to exploit this...
EUVD-2025-204806
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Thembay Diza allows PHP Local File Inclusion.This issue affects Diza: from n/a through 1.3.15...
GHSA-9F46-W24H-69W4
creationtimestamp| type| source ---|---|--- 2025-11-25 14:40:08+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115610852261225855...