24464 matches found
EUVD-2026-52572
A vulnerability was determined in diaowen DWSurvey up to 6.14.0. The affected element is an unknown function of the file /api/dwsurvey/app/survey/up-survey-status.do of the component Survey Status Handler. This manipulation causes improper authorization. The attack may be initiated remotely. The...
CVE-2026-18723
CVE-2026-18723 affects diaowen DWSurvey up to version 6.14.0. The vulnerability lies in an unknown function within /api/dwsurvey/app/survey/up-survey-status.do of the Survey Status Handler, leading to improper authorization. Exploitation could be remote (network vector) with low privileges requir...
GHSA-M2H6-J472-RP4C
creationtimestamp| type| source ---|---|--- 2026-08-03 22:31:31+00:00| seen| https://gist.github.com/alon710/ab6ab460d039209b756930fd867ab75f 2026-08-04 00:00:43+00:00| seen| https://gist.github.com/alon710/ab6ab460d039209b756930fd867ab75f...
EUVD-2026-52267
A vulnerability has been found in GL.iNet GL-MT3000 up to 4.4.5. This affects the function network.switchinfo/network.switchstatus of the file /usr/lib/oui-httpd/rpc/network of the component Network Lua RPC Plugin. Such manipulation of the argument switch leads to command injection. The attack ma...
CVE-2026-18600
GL.iNet GL-MT3000 devices (firmware up to 4.4.5) are affected by a vulnerability in the Network Lua RPC Plugin, specifically in network.switch_info/network.switch_status in /usr/lib/oui-httpd/rpc/network. Manipulating the switch argument enables remote command injection. The exploit has been publ...
CVE-2026-18600
A vulnerability has been found in GL.iNet GL-MT3000 up to 4.4.5. This affects the function network.switchinfo/network.switchstatus of the file /usr/lib/oui-httpd/rpc/network of the component Network Lua RPC Plugin. Such manipulation of the argument switch leads to command injection. The attack ma...
EUVD-2026-52265
An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server MDS could allow an unauthenticated remote attacker with network access to Management services to execute arbitrary commands on the Security Management Server. Successful...
CVE-2026-16300
creationtimestamp| type| source ---|---|--- 2026-08-03 09:02:19+00:00| seen| https://infosec.exchange/users/offseq/statuses/117030756328811295 2026-08-03 16:50:31+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms6xecb7dh2i...
CVE-2026-16563
The Academy LMS WordPress plugin before 3.8.3 does not verify course enrollment or lesson publication status when returning a single lesson through its REST API, allowing users with a self-service student Subscriber-level account to disclose the content of arbitrary lessons, including lessons of...
CVE-2026-9593
creationtimestamp| type| source ---|---|--- 2026-08-03 06:30:53+00:00| seen| https://infosec.exchange/users/certvde/statuses/117030168375818784...
CVE-2026-16564 Dokan < 5.0.9 - Vendor+ Arbitrary Order Status Modification via orders/bulk-actions REST Endpoint
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.9 does not verify order ownership on a REST endpoint that performs bulk order-status changes, allowing users with a Dokan vendor account to modify the status of any WooCommerce order on the marketplace,...
EUVD-2026-52183
The Academy LMS WordPress plugin before 3.8.3 does not verify course enrollment or lesson publication status when returning a single lesson through its REST API, allowing users with a self-service student Subscriber-level account to disclose the content of arbitrary lessons, including lessons of...
EUVD-2026-52184
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.9 does not verify order ownership on a REST endpoint that performs bulk order-status changes, allowing users with a Dokan vendor account to modify the status of any WooCommerce order on the marketplace,...
ROOT-OS-UBUNTU-2204-CVE-2026-53397 CVE-2026-53397 in rootio-linux - Patched by Root
Root has patched CVE-2026-53397 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2026-31421 CVE-2026-31421 in rootio-linux - Patched by Root
Root has patched CVE-2026-31421 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2025-40342 CVE-2025-40342 in rootio-linux - Patched by Root
Root has patched CVE-2025-40342 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2025-37907 CVE-2025-37907 in rootio-linux - Patched by Root
Root has patched CVE-2025-37907 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2024-53176 CVE-2024-53176 in rootio-linux - Patched by Root
Root has patched CVE-2024-53176 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...