24726 matches found
CVE-2026-23558
A flaw was found in Xen. A race condition exists when a Hardware Virtual Machine HVM or Para-Virtualization Hybrid PVH guest changes its grant table version from v2 to v1 while simultaneously mapping status pages. This can lead to some status pages being freed while still mapped in the guest's...
PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting vulnerability via improper URL sanitation
A flaw was found in PHP, specifically within the PHP-FPM status page. Due to improper sanitation of user data, a remote attacker can craft a malicious URL. When a user views the PHP-FPM status page with this crafted URL, it can lead to the execution of arbitrary JavaScript code Cross-Site Scripti...
CVE-2026-20452
creationtimestamp| type| source ---|---|--- 2026-06-01 06:49:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn7ign2zc62v 2026-06-03 06:13:35+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mediatek-9 2026-06-06 08:00:05+00:00| seen|...
PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting vulnerability via improper URL sanitation
A flaw was found in PHP, specifically within the PHP-FPM status page. Due to improper sanitation of user data, a remote attacker can craft a malicious URL. When a user views the PHP-FPM status page with this crafted URL, it can lead to the execution of arbitrary JavaScript code Cross-Site Scripti...
PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting vulnerability via improper URL sanitation
A flaw was found in PHP, specifically within the PHP-FPM status page. Due to improper sanitation of user data, a remote attacker can craft a malicious URL. When a user views the PHP-FPM status page with this crafted URL, it can lead to the execution of arbitrary JavaScript code Cross-Site Scripti...
Apache ActiveMQ Jolokia Security Auditor
This is a security assessment tool for Apache ActiveMQ deployments that expose the Jolokia management interface. It verifies connectivity, evaluates authentication status, retrieves Jolokia agent information, and identifies accessible ActiveMQ broker instances through JMX endpoints...
Apache Airflow 安全漏洞
Apache Airflow is an open-source platform developed by the Apache Foundation in the United States. It allows for the creation, management, and monitoring of workflows. This platform features scalability and dynamic monitoring capabilities. However, Apache Airflow has security vulnerabilities. The...
PT-2026-45271
A vulnerability has been found in raisulislamg4 student management system by php up to 310d950e09013d5133c6b9210aff9444382d16d1. The affected element is an unknown function of the file add user check.php of the component User Creation Handler. The manipulation of the argument role leads to sql...
PT-2026-45423
A flaw has been found in CodeAstro Online Job Portal 1.0. This affects an unknown function of the file /users/application status.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used...
CodeAstro Online Job Portal SQL注入漏洞
CodeAstro Online Job Portal is an online job portal operated by CodeAstro Corporation. Version 1.0 of CodeAstro Online Job Portal has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter ID in the file/users/applicationstatus.php, which may lead to SQL...
CVE-2026-42253
creationtimestamp| type| source ---|---|--- 2026-05-31 17:48:14+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mn64rdw2aa26...
CVE-2026-10206
creationtimestamp| type| source ---|---|--- 2026-05-31 06:47:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116667844603803875 2026-05-31 11:01:02+00:00| seen| https://infosec.exchange/users/dragonjar/statuses/116668842757514975 2026-05-31 16:16:47+00:00| seen|...
CVE-2026-10161
A vulnerability was detected in TRENDnet TEW-432BRP 3.10B20. This affects the function formResetStatistic of the file /goform/formResetStatistic. Performing a manipulation of the argument statusstatistic results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is...
CVE-2026-10192
creationtimestamp| type| source ---|---|--- 2026-05-30 17:04:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116664608498253097 2026-05-31 19:04:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn6b26y72e2s 2026-05-31 23:04:21+00:00| seen|...
CVE-2026-10183
creationtimestamp| type| source ---|---|--- 2026-05-30 16:37:24+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116664502304851453 2026-05-31 16:02:18+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mn5wtvtac62j 2026-05-31 16:49:38+00:00| seen|...
CVE-2026-10162
creationtimestamp| type| source ---|---|--- 2026-05-30 11:14:14+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116663232233376212 2026-05-31 03:00:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mn4l5tcb7b2k 2026-05-31 03:00:29+00:00| seen|...
CVE-2026-10165
creationtimestamp| type| source ---|---|--- 2026-05-30 07:52:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116662437600071464 2026-05-31 04:30:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/116667306745449211 2026-05-31 04:30:26+00:00| seen|...
Linux Distros Unpatched Vulnerability : CVE-2026-49214
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Versions prior to 2.10.2 did not reject ASCII control characters, whitespace, or DEL in...
Sparkle's AppInstaller post-stage-1 XPC listener accepts unvalidated connections, allowing spoofed appcast item data injection
Summary AppInstaller post-stage-1 XPC listener accepts unvalidated connections, allowing spoofed appcast item data injection. Details Autoupdate/AppInstaller.m's shouldAcceptNewConnection: only enforces SUCodeSigningVerifier validateConnection: before stage 1 completes. After...