GHSA-4255-C27H-62M5

creationtimestamp| type| source ---|---|--- 2026-02-10 05:40:05+00:00| seen| https://gist.github.com/alon710/5db565d21892e24ae6ebdfecaa349708...

GHSA-8GRV-JQ2G-CFHW

creationtimestamp| type| source ---|---|--- 2026-02-10 05:10:05+00:00| seen| https://gist.github.com/alon710/041178d8a553aa39851ef0441a5d85f3...

CVE-2026-0488

creationtimestamp| type| source ---|---|--- 2026-02-10 04:22:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mei4hmbz4n25 2026-02-10 06:00:43+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3meibww5ntu2b 2026-02-10 06:00:52+00:00| seen|...

GHSA-GG64-XXR9-QHJP

creationtimestamp| type| source ---|---|--- 2026-02-10 03:10:05+00:00| seen| https://gist.github.com/alon710/98338210f5bd9ada35f70b193f4ec636...

[SECURITY] Fedora 43 Update: rust-procs-0.14.10-7.fc43

A modern replacement for ps...

FastGPT 输入验证错误漏洞

FastGPT is an open-source knowledge base question-answering system based on large language models, developed by Labring. In versions 4.14.0 to 4.14.5 of FastGPT, there is a vulnerability related to input validation errors. This vulnerability stems from the direct access to the plugin system witho...

PT-2026-7419

Name of the Vulnerable Software and Affected Versions FastGPT versions 4.14.0 through 4.14.5 Description FastGPT, an AI Agent building platform, has an issue where the plugin system can be accessed directly through the API endpoint /api/plugin/xxx without authentication. This affects versions...

GHSA-9F5H-MMQ6-2X78

creationtimestamp| type| source ---|---|--- 2026-02-09 23:10:05+00:00| seen| https://gist.github.com/alon710/f17e6e93e24b62efe6529ae7f171eec3...

GHSA-7JX7-3846-M7W7

creationtimestamp| type| source ---|---|--- 2026-02-09 22:10:05+00:00| seen| https://gist.github.com/alon710/282df0d3c2c9c8c835a6fd15acd2475f...

CVE-2026-25806

PlaciPy (version 1.0.0) exposes potential IDOR-like authorization gaps on student records via GET /api/students/:email, PUT /api/students/:email/status, and DELETE /api/students/:email. The backend only enforces authentication (authenticateToken) and does not verify ownership, administrative/staf...

CVE-2025-1303

creationtimestamp| type| source ---|---|--- 2026-02-09 18:34:06+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-1303.yaml 2026-02-12 21:03:29+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3meovcerf2g2c...

The vulnerability of the status_resync() function in the drivers/md/md.c file of the multi-device (RAID and LVM) driver for the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the statusresync function in the drivers/md/md.c file of the multiple-device driver RAID and LVM module of the Linux kernel is related to the improper shutdown or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

PlaciPy 授权问题漏洞

PlaciPy is an open-source tool developed by PlaciPy to generate placeholder images. Version 1.0.0 of PlaciPy has a vulnerability related to authorization issues. This vulnerability stems from the code evaluation endpoint not verifying the lifecycle status of evaluations, which may lead to...

CVE-2026-2187

creationtimestamp| type| source ---|---|--- 2026-02-08 09:22:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116034275302342033...

GHSA-F5X2-VJ4H-VG4C

creationtimestamp| type| source ---|---|--- 2026-02-08 03:10:06+00:00| seen| https://gist.github.com/alon710/8313d7afe645c9d035fed8ea6e3f58d8...

CVE-2026-2129

A vulnerability was found in D-Link DIR-823X 250416. Affected by this issue is some unknown functionality of the file /goform/setacstatus. Performing a manipulation of the argument acipaddr/acipstatus/aprandtime results in os command injection. The attack may be initiated remotely. The exploit ha...

CVE-2026-2129

A vulnerability was found in D-Link DIR-823X 250416. Affected by this issue is some unknown functionality of the file /goform/setacstatus. Performing a manipulation of the argument acipaddr/acipstatus/aprandtime results in os command injection. The attack may be initiated remotely. The exploit ha...

CVE-2026-2129 D-Link DIR-823X set_ac_status os command injection

A vulnerability was found in D-Link DIR-823X 250416. Affected by this issue is some unknown functionality of the file /goform/setacstatus. Performing a manipulation of the argument acipaddr/acipstatus/aprandtime results in os command injection. The attack may be initiated remotely. The exploit ha...

CVE-2026-2129 D-Link DIR-823X set_ac_status os command injection

A vulnerability was found in D-Link DIR-823X 250416. Affected by this issue is some unknown functionality of the file /goform/setacstatus. Performing a manipulation of the argument acipaddr/acipstatus/aprandtime results in os command injection. The attack may be initiated remotely. The exploit ha...

CVE-2026-25858

creationtimestamp| type| source ---|---|--- 2026-02-08 00:00:56+00:00| seen| https://infosec.exchange/users/offseq/statuses/116032067514723066 2026-02-08 10:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3medq3l2nc724 2026-02-08 10:30:46+00:00| seen|...