26988 matches found
CVE-2026-7143 1000 Projects Portfolio Management System MCA block_status.php sql injection
A vulnerability was identified in 1000 Projects Portfolio Management System MCA up to 1.0. This affects an unknown function of the file /admin/blockstatus.php. The manipulation of the argument q leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and...
CVE-2026-42363
creationtimestamp| type| source ---|---|--- 2026-04-27 00:22:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkgshdixcu2g 2026-04-27 01:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116474080655255784 2026-04-27 01:30:30+00:00| seen|...
PT-2026-35498
A vulnerability was identified in 1000 Projects Portfolio Management System MCA up to 1.0. This affects an unknown function of the file /admin/block status.php. The manipulation of the argument q leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and...
PT-2026-44290
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.11-1.1 Description A heap leak exists in the usblp driver. The usblp read status function requests 1 byte of data, but if a malicious printer responds with zero bytes, the usblp ctrl msg function discards the...
1000 Projects Portfolio Management System MCA 注入漏洞
The 1000 Projects Portfolio Management System MCA is an open-source combination management system developed by 1000 Projects. Versions of the 1000 Projects Portfolio Management System MCA, including version 1.0 and earlier, had a SQL injection vulnerability. This vulnerability stemmed from the...
Linksys MR9600 Code Execution
The vulnerability of the BTRequestGetSmartConnectStatus function in the Linksys MR9600 router’s microprogramming software is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
PT-2026-47323
Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.0 through 2.4.67 Description A buffer over-read occurs during outbound OCSP Online Certificate Status Protocol requests sent to an attacker-controlled OCSP server. A buffer over-read is a condition where a syste...
Linux Distros Unpatched Vulnerability : CVE-2026-31619
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: fireworks: bound device-supplied status before string array lookup The status field in an EFW response is a 32-bit value supplied by the firewire device...
CVE-2026-11234
creationtimestamp| type| source ---|---|--- 2026-04-26 16:22:38+00:00| seen| https://mastodon.social/ap/users/115426718704364579/statuses/116471926431000914 2026-04-26 16:22:54+00:00| seen| https://bsky.app/profile/netsecio.bsky.social/post/3mkfxojpptk2q 2026-04-27 03:46:54+00:00| seen|...
CVE-2026-7035
creationtimestamp| type| source ---|---|--- 2026-04-26 14:17:15+00:00| seen| https://mastodon.social/users/RedPacketSecurity/statuses/116471403743332437 2026-04-30 18:07:11+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mkq7ekvz6p2u...
CVE-2026-7068
creationtimestamp| type| source ---|---|--- 2026-04-26 08:09:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116469985821024174 2026-04-27 00:21:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkgsgupivh2l 2026-04-27 14:44:12+00:00| published-proof-of-concep...
KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish
...
ALSA: fireworks: bound device-supplied status before string array lookup
...
CVE-2026-7069
creationtimestamp| type| source ---|---|--- 2026-04-26 07:56:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116469935090388164 2026-04-27 00:21:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkgsh44fmy2n 2026-04-27 00:21:57+00:00| seen|...
CVE-2026-6992
A vulnerability was identified in Linksys MR9600 2.0.6.206937. This affects the function BTRequestGetSmartConnectStatus of the file /etc/init.d/runcentral2.sh of the component JNAP Action Handler. The manipulation of the argument pin leads to os command injection. The attack may be initiated...
CVE-2026-6992 Linksys MR9600 JNAP Action run_central2.sh BTRequestGetSmartConnectStatus os command injection
A vulnerability was identified in Linksys MR9600 2.0.6.206937. This affects the function BTRequestGetSmartConnectStatus of the file /etc/init.d/runcentral2.sh of the component JNAP Action Handler. The manipulation of the argument pin leads to os command injection. The attack may be initiated...
EUVD-2026-25668
A vulnerability was identified in Linksys MR9600 2.0.6.206937. This affects the function BTRequestGetSmartConnectStatus of the file /etc/init.d/runcentral2.sh of the component JNAP Action Handler. The manipulation of the argument pin leads to os command injection. The attack may be initiated...
CVE-2026-6992
CVE-2026-6992 affects Linksys MR9600 (firmware 2.0.6.206937). The vulnerability lies in BTRequestGetSmartConnectStatus within /etc/init.d/run_central2.sh (JNAP Action Handler), where manipulating the argument pin enables OS command injection. The attack can be initiated remotely and public exploi...
CVE-2026-6992
A vulnerability was identified in Linksys MR9600 2.0.6.206937. This affects the function BTRequestGetSmartConnectStatus of the file /etc/init.d/runcentral2.sh of the component JNAP Action Handler. The manipulation of the argument pin leads to os command injection. The attack may be initiated...
CVE-2026-22746
A flaw was found in Spring Security. If an application uses the UserDetailsisEnabled, isAccountNonExpired, or isAccountNonLocked user attributes, an attacker can bypass the DaoAuthenticationProvider's timing attack defense. This bypass allows an attacker to potentially gain limited information...