GHSA-HXW8-4H9J-HQ2R

creationtimestamp| type| source ---|---|--- 2026-02-10 07:40:05+00:00| seen| https://gist.github.com/alon710/39fd68ea5d11f2bf18c6fe6acdd0ee1d...

GHSA-4255-C27H-62M5

creationtimestamp| type| source ---|---|--- 2026-02-10 05:40:05+00:00| seen| https://gist.github.com/alon710/5db565d21892e24ae6ebdfecaa349708...

GHSA-8GRV-JQ2G-CFHW

creationtimestamp| type| source ---|---|--- 2026-02-10 05:10:05+00:00| seen| https://gist.github.com/alon710/041178d8a553aa39851ef0441a5d85f3...

CVE-2026-0488

creationtimestamp| type| source ---|---|--- 2026-02-10 04:22:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mei4hmbz4n25 2026-02-10 06:00:43+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3meibww5ntu2b 2026-02-10 06:00:52+00:00| seen|...

GHSA-GG64-XXR9-QHJP

creationtimestamp| type| source ---|---|--- 2026-02-10 03:10:05+00:00| seen| https://gist.github.com/alon710/98338210f5bd9ada35f70b193f4ec636...

[SECURITY] Fedora 43 Update: rust-procs-0.14.10-7.fc43

A modern replacement for ps...

PT-2026-7419

Name of the Vulnerable Software and Affected Versions FastGPT versions 4.14.0 through 4.14.5 Description FastGPT, an AI Agent building platform, has an issue where the plugin system can be accessed directly through the API endpoint /api/plugin/xxx without authentication. This affects versions...

FastGPT input validation vulnerability

FastGPT is an open-source knowledge base question-answering system based on large language models, developed by Labring. In versions 4.14.0 to 4.14.5 of FastGPT, there is a vulnerability related to input validation errors. This vulnerability stems from the direct access to the plugin system witho...

GHSA-9F5H-MMQ6-2X78

creationtimestamp| type| source ---|---|--- 2026-02-09 23:10:05+00:00| seen| https://gist.github.com/alon710/f17e6e93e24b62efe6529ae7f171eec3...

GHSA-7JX7-3846-M7W7

creationtimestamp| type| source ---|---|--- 2026-02-09 22:10:05+00:00| seen| https://gist.github.com/alon710/282df0d3c2c9c8c835a6fd15acd2475f...

CVE-2026-25806

PlaciPy (version 1.0.0) exposes potential IDOR-like authorization gaps on student records via GET /api/students/:email, PUT /api/students/:email/status, and DELETE /api/students/:email. The backend only enforces authentication (authenticateToken) and does not verify ownership, administrative/staf...

CVE-2025-1303

creationtimestamp| type| source ---|---|--- 2026-02-09 18:34:06+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-1303.yaml 2026-02-12 21:03:29+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3meovcerf2g2c...

PlaciPy authorization issue vulnerability

PlaciPy is an open-source tool developed by PlaciPy to generate placeholder images. Version 1.0.0 of PlaciPy has a vulnerability related to authorization issues. This vulnerability stems from the code evaluation endpoint not verifying the lifecycle status of evaluations, which may lead to...

Linux kernel RAID LVM DoS

The vulnerability of the statusresync function in the drivers/md/md.c file of the multiple-device driver RAID and LVM module of the Linux kernel is related to the improper shutdown or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2026-2187

creationtimestamp| type| source ---|---|--- 2026-02-08 09:22:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116034275302342033...

GHSA-F5X2-VJ4H-VG4C

creationtimestamp| type| source ---|---|--- 2026-02-08 03:10:06+00:00| seen| https://gist.github.com/alon710/8313d7afe645c9d035fed8ea6e3f58d8...

CVE-2026-2129

A vulnerability was found in D-Link DIR-823X 250416. Affected by this issue is some unknown functionality of the file /goform/setacstatus. Performing a manipulation of the argument acipaddr/acipstatus/aprandtime results in os command injection. The attack may be initiated remotely. The exploit ha...

CVE-2026-2129

A vulnerability was found in D-Link DIR-823X 250416. Affected by this issue is some unknown functionality of the file /goform/setacstatus. Performing a manipulation of the argument acipaddr/acipstatus/aprandtime results in os command injection. The attack may be initiated remotely. The exploit ha...

CVE-2026-2129 D-Link DIR-823X set_ac_status os command injection

A vulnerability was found in D-Link DIR-823X 250416. Affected by this issue is some unknown functionality of the file /goform/setacstatus. Performing a manipulation of the argument acipaddr/acipstatus/aprandtime results in os command injection. The attack may be initiated remotely. The exploit ha...

CVE-2026-2129 D-Link DIR-823X set_ac_status os command injection

A vulnerability was found in D-Link DIR-823X 250416. Affected by this issue is some unknown functionality of the file /goform/setacstatus. Performing a manipulation of the argument acipaddr/acipstatus/aprandtime results in os command injection. The attack may be initiated remotely. The exploit ha...