EUVD-2026-2953

Cross-site scripting vulnerability exists in multiple Network Cameras TRIFORA 3 series provided by TOA Corporation. If an attacking administrator configures the affected product with some malicious input, an arbitrary script may be executed on the web browser of a victim administrator who accesse...

EUVD-2026-2493

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Avoid walking the Namespace if startnode is NULL Although commit 0c9992315e73 "ACPICA: Avoid walking the ACPI Namespace if it is not there" fixed the situation when both startnode and acpigblrootnode are NULL, the Linux...

EUVD-2026-1905

A security flaw has been discovered in UTT 进取 520W 1.7.7-180627. This impacts the function strcpy of the file /goform/ConfigWirelessBase. Performing a manipulation of the argument ssid results in buffer overflow. The attack is possible to be carried out remotely. The exploit has been released to...

EUVD-2026-1911

Malicious code in conmiyagi-map npm...

CVE-2023-49618

Improper buffer restrictions in some IntelR System Security Report and System Resources Defense firmware may allow a privileged user to potentially enable escalation of privilege via local access...

EUVD-2026-1479

OPEXUS eCASE Audit allows an authenticated attacker to save JavaScript as a comment in the "Estimated Staff Hours" field. The JavaScript is executed whenever another user visits the Project Cost tab. Fixed in OPEXUS eCASE Audit 11.14.2.0...

CVE-2025-68874

creationtimestamp| type| source ---|---|--- 2026-01-08 10:28:33+00:00| seen| https://gist.github.com/Darkcrai86/5c5965912c633226a27ad1629df01b77 2026-01-08 10:51:06+00:00| seen| https://gist.github.com/Darkcrai86/e95e49ad41679988a60dbc54c9d690f9 2026-01-08 12:54:12+00:00| seen|...

CVE-2026-22257

creationtimestamp| type| source ---|---|--- 2026-01-08 08:04:13+00:00| published-proof-of-concept| https://github.com/salvo-rs/salvo/security/advisories/GHSA-54m3-5fxr-2f3j 2026-01-08 19:40:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbwqezghqa2u 2026-01-08...

EUVD-2026-0288

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2025-204943

Malicious code in amournapraia npm...

EUVD-2025-204671

Malicious code in colorfulpacket PyPI...

EUVD-2025-204016

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

EUVD-2025-203436

WEBIGniter 28.7.23 contains a file upload vulnerability that allows authenticated attackers to upload and execute dangerous PHP files through the media function. Attackers can leverage any created account to upload malicious PHP scripts that enable remote code execution on the application server...

Arbitrary file write via tar traversal

Summary A crafted tar.gz passed to MLflow pyfunc extraction is unpacked with tarfile.extractall without path validation. Archive entries containing .. or absolute paths can escape the destination directory and write arbitrary files on the host. This is reachable when users supply prebuiltenvuri o...

CVE-2025-8110

creationtimestamp| type| source ---|---|--- 2025-12-10 15:07:31+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115695894618278419 2025-12-10 15:37:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7nfazcxjj2g 2025-12-10 17:26:06+00:00| seen|...

CVE-2025-64156

creationtimestamp| type| source ---|---|--- 2025-12-09 18:46:30+00:00| seen| https://gist.github.com/Darkcrai86/32d86c31fb28affcca89ef34ff2489fb 2025-12-09 19:11:25+00:00| seen| https://gist.github.com/Darkcrai86/4806712bee6f08cd7da8a8819e219d5d...

CVE-2025-14195

creationtimestamp| type| source ---|---|--- 2025-12-07 19:30:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7gaua6bn32w...

CVE-2025-13360

creationtimestamp| type| source ---|---|--- 2025-12-05 09:24:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7a64alhdh2w...

EUVD-2025-200206

Malicious code in data-xabit npm...

Vulnerabilities fixed in GitLab

GitLab has fixed vulnerabilities in its Community Edition CE and Enterprise Edition EE versions. The vulnerabilities include the ability for unauthenticated users to cause Denial of Service DoS conditions by submitting malicious JSON requests. In addition, unauthenticated users could join arbitra...