27167 matches found
PT-2026-21370
ZoneMinder is a free, open source closed-circuit television software application. In versions 1.36.37 and below and 1.37.61 through 1.38.0, there is a second-order SQL Injection vulnerability in the web/ajax/status.php file within the getNearEvents function. Event field values specifically Name a...
CVE-2026-27113
Liquid Prompt is an adaptive prompt for Bash and Zsh. Starting in commit cf3441250bb5d8b45f6f8b389fcdf427a99ac28a and prior to commit a4f6b8d8c90b3eaa33d13dfd1093062ab9c4b30c on the master branch, arbitrary command injection can lead to code execution when a user enters a directory in a Git...
UBUNTU-CVE-2026-27113
Liquid Prompt is an adaptive prompt for Bash and Zsh. Starting in commit cf3441250bb5d8b45f6f8b389fcdf427a99ac28a and prior to commit a4f6b8d8c90b3eaa33d13dfd1093062ab9c4b30c on the master branch, arbitrary command injection can lead to code execution when a user enters a directory in a Git...
GHSA-GV8R-9RW9-9697
creationtimestamp| type| source ---|---|--- 2026-02-20 21:40:40+00:00| seen| https://gist.github.com/alon710/4cd1875c786b514610f28029ba8d8c98...
CVE-2026-2853
creationtimestamp| type| source ---|---|--- 2026-02-20 21:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfcyvdcvl72c 2026-02-24 05:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mflf3o47j42m...
CVE-2021-35402
PROLiNK PRC2402M 20190909 before 2021-06-13 allows liveapi.cgi?page=satellitelist OS command injection via shell metacharacters in the ip parameter for satellitestatus...
CVE-2026-24891
creationtimestamp| type| source ---|---|--- 2026-02-20 18:32:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfcqltw7ab2h 2026-02-24 20:40:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfmzmeuhn223...
CVE-2026-2885
creationtimestamp| type| source ---|---|--- 2026-02-20 17:35:37+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116104163122684263 2026-02-21 21:19:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mffkf3kxom2k 2026-02-21 21:19:33+00:00| seen|...
BIT-TOMCAT-2026-24734 Apache Tomcat Native, Apache Tomcat: OCSP revocation bypass
Improper Input Validation vulnerability in Apache Tomcat Native, Apache Tomcat. When using an OCSP responder, Tomcat Native and Tomcat's FFM port of the Tomcat Native code did not complete verification or freshness checks on the OCSP response which could allow certificate revocation to be bypasse...
CVE-2017-4565
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...
CVE-2017-4155
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...
CVE-2026-26050
creationtimestamp| type| source ---|---|--- 2026-02-20 03:00:30+00:00| seen| https://jvn.jp/en/jp/JVN69531868/ 2026-02-20 09:19:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfbrq5p4nf2t 2026-02-20 10:30:36+00:00| seen|...
CVE-2021-35402
PROLiNK PRC2402M 20190909 before 2021-06-13 allows liveapi.cgi?page=satellitelist OS command injection via shell metacharacters in the ip parameter for satellitestatus...
CVE-2021-35402
The PROLiNK PRC2402M router (versions prior to 2021-06-13 ) is vulnerable to OS command injection . The root cause is the improper neutralization of shell metacharacters in the ip parameter within the live_api.cgi?page=satellite_list script's satellite_status function. An unauthenticated remote a...
CVE-2021-35402
PROLiNK PRC2402M 20190909 before 2021-06-13 allows liveapi.cgi?page=satellitelist OS command injection via shell metacharacters in the ip parameter for satellitestatus...
Fedora: Security Advisory (FEDORA-2026-60e8919a4a)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2026-26326 OpenClaw skills.status could leak secrets to operator.read clients
OpenClaw is a personal AI assistant. Prior to version 2026.2.14, skills.status could disclose secrets to operator.read clients by returning raw resolved config values in configChecks for skill requires.config paths. Version 2026.2.14 stops including raw resolved config values in requirement check...
CVE-2026-26326
CVE-2026-26326 affects the OpenClaw OpenClaw AI assistant. Before version 2026.2.14, the function skills.status could disclose secrets to operator.read clients by returning raw resolved config values in configChecks for requires.config paths. The fix in 2026.2.14 stops including raw resolved conf...
CVE-2026-26326 OpenClaw skills.status could leak secrets to operator.read clients
OpenClaw is a personal AI assistant. Prior to version 2026.2.14, skills.status could disclose secrets to operator.read clients by returning raw resolved config values in configChecks for skill requires.config paths. Version 2026.2.14 stops including raw resolved config values in requirement check...