CVE-2026-46118

In the Linux kernel, the following vulnerability has been resolved: pseries/papr-hvpipe: Fix null ptr deref in paprhvpipedevcreatehandle commit 6d3789d347a7 "papr-hvpipe: convert paprhvpipedevcreatehandle to FDPREPARE", changed the create handle to FDPREPARE, but it caused kernel null-ptr-deref...

CVE-2026-22011

creationtimestamp| type| source ---|---|--- 2026-04-21 23:29:31+00:00| seen| Telegram/EOnjNYApXgYHJan5J2dTdjjTaiwT5fD5DgY21SwpLPKRuSg...

GHSA-F92M-JPV7-55P2

creationtimestamp| type| source ---|---|--- 2026-03-27 21:22:55+00:00| seen| Telegram/Gog278dWyh4lEZUplneDunVggYKWxHPgBiv3mkrQtX1ZGY...

📄 EspoCRM 9.3.3 Remote Code Execution / Path Traversal

EspoCRM versions 9.3.3 and below proof of concept remote code execution exploit that leverages formula ACL bypass, path traversal, and poisoning. !/bin/bash =========================================================================== EspoCRM command Example: ./poc.sh http://192.168.5.16:8090 admin...

CVE-2026-30857

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.3.0, a cross-tenant authorization bypass in the knowledge base copy endpoint allows any authenticated user to clone duplicate another tenant’s knowledge base into their own tena...

SQL Injection

io.dataease, dataease-plugin-common is vulnerable to SQL Injection. The vulnerability is due to improper sanitization of the dataSourceId parameter, which allows an attacker to inject and execute arbitrary SQL queries...

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication through the Milvus Proxy component, which skips the source ID check. An attacker can gain full administrative access to the cluster, allowing them to read, modify, or delete data and perform privileged operations...

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication through the Milvus Proxy component, which skips the source ID check. An attacker can gain full administrative access to the cluster, allowing them to read, modify, or delete data and perform privileged operations...

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication through the Milvus Proxy component, which skips the source ID check. An attacker can gain full administrative access to the cluster, allowing them to read, modify, or delete data and perform privileged operations...

CVE-2025-55092

creationtimestamp| type| source ---|---|--- 2025-10-17 05:20:59+00:00| seen| Telegram/0ADcdJdQegEBCngGyhjx6Psk8945WHsjefUys1fzUVkv0iY...

CVE-2018-12841

creationtimestamp| type| source ---|---|--- 2025-08-31 03:01:35+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...

CVE-2004-0380

creationtimestamp| type| source ---|---|--- 2025-08-31 03:01:30+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d 2025-08-31 03:13:08+00:00| seen| MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57...

CVE-2011-3412

creationtimestamp| type| source ---|---|--- 2025-08-31 03:01:16+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d 2025-08-31 03:12:52+00:00| seen| MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57...

CVE-2016-0126

creationtimestamp| type| source ---|---|--- 2025-08-31 03:01:10+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...

CVE-2025-8603

creationtimestamp| type| source ---|---|--- 2025-08-28 04:17:41+00:00| seen| Telegram/cQubv4Hq6Z1gjp-MoWMOwaQ0i2r0seTei0klo3tGliZEDc...

CVE-2025-36042

creationtimestamp| type| source ---|---|--- 2025-08-22 15:12:33+00:00| seen| Telegram/jKAlubd9Fs6CnQNKFn0jHldsfbxBpedudcX3110vUgikmo0...

CVE-2025-23311

creationtimestamp| type| source ---|---|--- 2025-08-05 11:28:20+00:00| seen| https://poliverso.org/objects/0477a01e-4c41e1f5-06704c34bb3024e5 2025-08-06 14:05:55+00:00| seen| Telegram/pxT0QZaewBwGfMoqU9NsQjSpVQT2ILSXIFlN7ZxNu3GtCv 2025-08-07 03:01:56+00:00| seen|...

CVE-2024-30099

creationtimestamp| type| source ---|---|--- 2025-07-16 01:25:00+00:00| seen| Telegram/crz4oo14RvwIxHdvh7Q2o7ud9Kdi8M2yUw37EWwoWlaASw...

CVE-2025-3723

creationtimestamp| type| source ---|---|--- 2025-04-16 19:56:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12145 2025-04-17 00:26:01+00:00| seen| https://t.me/cvedetector/23183...

CVE-2025-32676

creationtimestamp| type| source ---|---|--- 2025-04-09 20:57:32+00:00| seen| https://t.me/cvedetector/22585...