CVE-2019-12463

An issue was discovered in LibreNMS 1.50.1. The scripts that handle graphing options includes/html/graphs/common.inc.php and includes/html/graphs/graphs.inc.php do not sufficiently validate or encode several fields of user supplied input. Some parameters are filtered with mysqlirealescapestring,...

CVE-2024-2040

The Himer WordPress theme before 2.1.1 does not have CSRF checks in some places, which could allow attackers to make users join private groups via a CSRF attack...

CVE-2025-1394

The Ember ZNet stack’s packet buffer manager may read out of bound memory leading to an assert, causing a Denial of Service DoS...

CVE-2022-27832

Improper boundary check in media.extractor library prior to SMR Apr-2022 Release 1 allows attackers to cause denial of service via a crafted media file...

CVE-2024-2982

A vulnerability has been found in Tenda FH1202 1.2.0.14408 and classified as critical. Affected by this vulnerability is the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to command injection. The exploit has been disclosed to the public and...

CVE-2025-6186 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

WordPress plugin MTCaptcha 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

PT-2026-1649

Name of the Vulnerable Software and Affected Versions ThemeHunk Oneline Lite versions through 6.6 Description An authorization issue exists in ThemeHunk Oneline Lite, stemming from incorrectly configured access control security levels. This allows for unauthorized access. Recommendations Update...

CVE-2025-47331

Technical details are not publicly available in the provided documents for CVE-2025-47331; monitor for updates.

CVE-2025-12067

creationtimestamp| type| source ---|---|--- 2026-01-06 09:00:15+00:00| seen| Telegram/9ppSVQvHBcmeJhqKXkJcdK8KPKpC4HJwrZFvIW3FQvkAE8c 2026-01-06 10:34:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbqqwpe2te2m...

CVE-2026-21744

creationtimestamp| type| source ---|---|--- 2026-01-06 07:12:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbqfnff3gl2g...

Arteco Web Client DVR/NVR 安全特征问题漏洞

Arteco Web Client DVR/NVR is a web management page from Arteco, Italy. A security feature issue vulnerability exists in Arteco Web Client DVR/NVR that stems from insufficient session ID complexity, which could lead to bypassing authentication and accessing live camera streams by brute-force...

WordPress plugin Frappé 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

WordPress plugin Better Business Reviews 安全漏洞

...

WordPress plugin Sell Downloads 安全漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPre...

CVE-2026-0571 yeqifu warehouse AppFileUtils.java createResponseEntity path traversal

A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this issue is the function createResponseEntity of the file warehouse\src\main\java\com\yeqifu\sys\common\AppFileUtils.java. The manipulation of the argument path results in path...

PT-2026-5131

Name of the Vulnerable Software and Affected Versions libsoup affected versions not specified Description An issue exists in the libsoup HTTP library where proxy authentication credentials can be sent to unintended destinations. This occurs because, during HTTP redirects to a different host, the...

PT-2026-7644

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 145.0.7632.45 Description A flaw exists in the PictureInPicture functionality of Google Chrome. This issue could allow a remote attacker to perform UI spoofing by convincing a user to interact with a specially...

EUVD-2025-205985

Cross-Site Request Forgery CSRF vulnerability in Ink themes WP Gmail SMTP allows Cross Site Request Forgery.This issue affects WP Gmail SMTP: from n/a through 1.0.7...

CVE-2025-15390 PHPGurukul Small CRM edit-user.php authorization

A security flaw has been discovered in PHPGurukul Small CRM 4.0. This impacts an unknown function of the file /admin/edit-user.php. The manipulation results in missing authorization. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for...