CVE-2026-29513

CVE-2026-29513 describes a stored XSS in Hereta ETH-IMC408M firmware ≤1.0.15. An authenticated attacker can inject JavaScript through the Device Location field via the System Status interface, with scripts executing in browsers of users viewing the status page. The CVSS 4.0 metrics indicate Netwo...

CVE-2026-1296

creationtimestamp| type| source ---|---|--- 2026-03-16 16:03:52+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-1296.yaml 2026-03-17 21:03:03+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mhbuolm47v2q...

CVE-2025-10685

creationtimestamp| type| source ---|---|--- 2026-03-16 14:57:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116239435734829861...

CERTFR-2026-ACT-011

creationtimestamp| type| source ---|---|--- 2026-03-16 13:21:17+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116239058462914309...

CVE-2026-4227

creationtimestamp| type| source ---|---|--- 2026-03-16 12:01:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116238743317716735 2026-03-21 03:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhk4bi22lq2a...

CVE-2025-15587

creationtimestamp| type| source ---|---|--- 2026-03-16 10:55:00+00:00| seen| https://cert.pl/en/posts/2026/03/CVE-2025-11500/ 2026-03-16 12:28:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116238849930743234...

CVE-2025-68261

creationtimestamp| type| source ---|---|--- 2026-03-16 08:05:20+00:00| seen| https://gist.github.com/joxd11222/1058f2b3d98f53fdb469fe874745a6ee 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen|...

CVE-2026-4212

creationtimestamp| type| source ---|---|--- 2026-03-16 04:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116236971339860975 2026-03-19 15:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhgdl3ozfv2u...

CVE-2026-4206

creationtimestamp| type| source ---|---|--- 2026-03-16 03:00:33+00:00| seen| https://infosec.exchange/users/offseq/statuses/116236617480442762...

CVE-2026-4201

creationtimestamp| type| source ---|---|--- 2026-03-16 01:30:42+00:00| seen| https://infosec.exchange/users/offseq/statuses/116236263599697730...

SUSE CVE-2010-4326

Multiple buffer overflows in gwwww1.dll in GroupWise Internet Agent GWIA in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via variables in a VCALENDAR message, as demonstrated by a long 1 REQUEST-STATUS, 2 TZNAME, 3 COMMENT, or 4 RRULE variable in this message...

PT-2026-25782

Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary JavaScript by manipulating the Device Location field. Attackers can inject malicious scripts through the System Status interface that...

Moxa Discontinued Devices Detection

The current plugin identifies Moxa devices that are currently discontinued. Moxa Lifecycle Statuses: - Active: Product is currently available and supported. - Discontinued: Product has been phased out and is no longer manufactured or supported. %NASLMINLEVEL 80900 C Tenable Network Security, Inc...

Moxa Active Devices Detection

The current plugin identifies Moxa devices that are still under active support. Moxa Lifecycle Statuses: - Active: Product is currently available and supported. - Discontinued: Product has been phased out and is no longer manufactured or supported. %NASLMINLEVEL 80900 C Tenable Network Security,...

EulerOS 2.0 SP12 : kernel (EulerOS-SA-2026-1366)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : tcpbpf: Call skmsgfree when tcpbpfsendverdict fails to allocate psock-cork.CVE-2025-39913 md: fix rcu protection in mdwakeupthreadCVE-2025-68374...

PT-2026-25781

Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary JavaScript by manipulating the Device Name field. Attackers can inject malicious scripts through the System Status interface that execut...

PT-2026-25831

A security flaw has been discovered in Tiandy Easy7 Integrated Management Platform 7.17.0. The affected element is an unknown function of the file /rest/devStatus/queryResources of the component Endpoint. Performing a manipulation of the argument areaId results in sql injection. The attack can be...

CVE-2026-4172

creationtimestamp| type| source ---|---|--- 2026-03-15 13:30:15+00:00| seen| https://infosec.exchange/users/offseq/statuses/116233431470559225...

CVE-2026-4214

creationtimestamp| type| source ---|---|--- 2026-03-15 12:10:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116233116826289548 2026-03-22 01:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhmfzsqvxo23...

CVE-2026-32813

creationtimestamp| type| source ---|---|--- 2026-03-15 09:48:43+00:00| published-proof-of-concept| https://github.com/Admidio/admidio/security/advisories/GHSA-3x67-4c2c-w45m 2026-03-22 04:59:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhmr6y6qgz2u 2026-03-24...