GHSA-GG64-XXR9-QHJP

creationtimestamp| type| source ---|---|--- 2026-02-10 03:10:05+00:00| seen| https://gist.github.com/alon710/98338210f5bd9ada35f70b193f4ec636...

[SECURITY] Fedora 43 Update: rust-procs-0.14.10-7.fc43

A modern replacement for ps...

FastGPT 输入验证错误漏洞

FastGPT is an open-source knowledge base question-answering system based on large language models, developed by Labring. In versions 4.14.0 to 4.14.5 of FastGPT, there is a vulnerability related to input validation errors. This vulnerability stems from the direct access to the plugin system witho...

PT-2026-7419

Name of the Vulnerable Software and Affected Versions FastGPT versions 4.14.0 through 4.14.5 Description FastGPT, an AI Agent building platform, has an issue where the plugin system can be accessed directly through the API endpoint /api/plugin/xxx without authentication. This affects versions...

GHSA-9F5H-MMQ6-2X78

creationtimestamp| type| source ---|---|--- 2026-02-09 23:10:05+00:00| seen| https://gist.github.com/alon710/f17e6e93e24b62efe6529ae7f171eec3...

GHSA-7JX7-3846-M7W7

creationtimestamp| type| source ---|---|--- 2026-02-09 22:10:05+00:00| seen| https://gist.github.com/alon710/282df0d3c2c9c8c835a6fd15acd2475f...

CVE-2026-25806

PlaciPy (version 1.0.0) exposes potential IDOR-like authorization gaps on student records via GET /api/students/:email, PUT /api/students/:email/status, and DELETE /api/students/:email. The backend only enforces authentication (authenticateToken) and does not verify ownership, administrative/staf...

CVE-2025-1303

creationtimestamp| type| source ---|---|--- 2026-02-09 18:34:06+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-1303.yaml 2026-02-12 21:03:29+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3meovcerf2g2c...

The vulnerability of the status_resync() function in the drivers/md/md.c file of the multi-device (RAID and LVM) driver for the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the statusresync function in the drivers/md/md.c file of the multiple-device driver RAID and LVM module of the Linux kernel is related to the improper shutdown or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

PlaciPy 授权问题漏洞

PlaciPy is an open-source tool developed by PlaciPy to generate placeholder images. Version 1.0.0 of PlaciPy has a vulnerability related to authorization issues. This vulnerability stems from the code evaluation endpoint not verifying the lifecycle status of evaluations, which may lead to...

CVE-2026-2187

creationtimestamp| type| source ---|---|--- 2026-02-08 09:22:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116034275302342033...

GHSA-F5X2-VJ4H-VG4C

creationtimestamp| type| source ---|---|--- 2026-02-08 03:10:06+00:00| seen| https://gist.github.com/alon710/8313d7afe645c9d035fed8ea6e3f58d8...

CVE-2026-2129

A vulnerability was found in D-Link DIR-823X 250416. Affected by this issue is some unknown functionality of the file /goform/setacstatus. Performing a manipulation of the argument acipaddr/acipstatus/aprandtime results in os command injection. The attack may be initiated remotely. The exploit ha...

CVE-2026-2129

A vulnerability was found in D-Link DIR-823X 250416. Affected by this issue is some unknown functionality of the file /goform/setacstatus. Performing a manipulation of the argument acipaddr/acipstatus/aprandtime results in os command injection. The attack may be initiated remotely. The exploit ha...

CVE-2026-2129 D-Link DIR-823X set_ac_status os command injection

A vulnerability was found in D-Link DIR-823X 250416. Affected by this issue is some unknown functionality of the file /goform/setacstatus. Performing a manipulation of the argument acipaddr/acipstatus/aprandtime results in os command injection. The attack may be initiated remotely. The exploit ha...

CVE-2026-2129 D-Link DIR-823X set_ac_status os command injection

A vulnerability was found in D-Link DIR-823X 250416. Affected by this issue is some unknown functionality of the file /goform/setacstatus. Performing a manipulation of the argument acipaddr/acipstatus/aprandtime results in os command injection. The attack may be initiated remotely. The exploit ha...

CVE-2026-25858

creationtimestamp| type| source ---|---|--- 2026-02-08 00:00:56+00:00| seen| https://infosec.exchange/users/offseq/statuses/116032067514723066 2026-02-08 10:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3medq3l2nc724 2026-02-08 10:30:46+00:00| seen|...

The vulnerability of the ath12k_dp_mon_rx_parse_status_tlv() function in the drivers/net/wireless/ath/ath12k/dp_mon.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ath12kdpmonrxparsestatustlv function in the drivers/net/wireless/ath/ath12k/dpmon.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker...

PT-2026-6943

Name of the Vulnerable Software and Affected Versions D-Link DIR-823X version 250416 Description A flaw exists in D-Link DIR-823X version 250416 related to the processing of input for the file /goform/set ac status. Manipulation of the ac ipaddr, ac ipstatus, and ap randtime arguments can lead to...

CVE-2026-23738

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, user supplied/control values for Cookies and any GET variable query Parameter are directly interpolated into the HTML of the page using aststrappend. The...