3590 matches found
CVE-2026-30223
OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, when JWT authentication is configured using either "authJwtPubKeyPath" local RSA public key or "authJwtHmacSecret" HMAC secret, the configured audience value authJwtAud is not enforced during toke...
CVE-2026-2754
Navtor NavBox exposes sensitive configuration and operational data due to missing authentication on HTTP API endpoints. An unauthenticated remote attacker with network access to the device can execute HTTP GET requests to TCP port 8080 to retrieve internal network parameters including ECDIS & OT...
CVE-2018-25192
creationtimestamp| type| source ---|---|--- 2026-03-06 14:46:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfkja6cyt2v...
PT-2026-23718
Name of the Vulnerable Software and Affected Versions Navtor NavBox affected versions not specified Description The software exposes sensitive configuration and operational data because of a lack of authentication on HTTP API endpoints. A remote attacker with network access can send HTTP GET...
TencentOS Server 4: samba (TSSA-2026:0120)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0120 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
GHSA-7RGV-GQHR-FXG3 xgrammar vulnerable to DoS via multi-layer nesting
Summary The multi-level nested syntax caused a segmentation fault core dump. Details A trigger stack overflow or memory exhaustion was caused by constructing a malicious grammar rule containing 30,000 layers of nested parentheses. PoC !/usr/bin/env python3 """ XGrammar - Math Expression Generatio...
Exploit for CVE-2017-7184
No d...
AirPlay RTSP Device Discovery Scanner
The AirPlay RTSP Device Discovery Scanner is a Metasploit auxiliary module designed to safely identify Apple AirPlay-compatible devices by sending a legitimate RTSP OPTIONS request to the default AirPlay service port 7000/TCP. The module performs non-intrusive service fingerprinting only and does...
VulnCheck KEV: CVE-2021-22681
Multiple Rockwell products contain an insufficient protected credentials vulnerability. Studio 5000 Logix Designer software may allow a key to be discovered. This key is used to verify Logix controllers are communicating with Rockwell Automation design software. If successfully exploited, this...
CVE-2026-1713
IBM MQ 9.1.0.0 through 9.1.0.33 LTS, 9.2.0.0 through 9.2.0.40 LTS, 9.3.0.0 through 9.3.0.36 LTS, 9.30.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.17 LTS, and 9.4.0.0 through 9.4.4.1 CD...
CVE-2026-1841
creationtimestamp| type| source ---|---|--- 2026-03-02 12:33:36+00:00| seen| https://www.cert.si/si-cert-2026-02/...
CVE-2025-58402
creationtimestamp| type| source ---|---|--- 2026-03-02 10:55:00+00:00| seen| https://cert.pl/en/posts/2026/03/CVE-2025-10350/ 2026-03-02 12:04:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg37lmhd7v2z...
Cyber-Guide
!Typing SVGhttps://readme-typing-svg.herokuapp.com?font=Fira...
Area Man Accidentally Hacks 6,700 Camera-Enabled Robot Vacuums
Plus: The top US cyber agency falls into shambles, AI models develop an upsetting penchant for nuclear weapons, and more...
CVE-2026-28411
creationtimestamp| type| source ---|---|--- 2026-02-28 00:00:43+00:00| seen| https://infosec.exchange/users/offseq/statuses/116145313710936969 2026-02-28 00:00:45+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mfuw7sp34d2h 2026-02-28 01:06:12+00:00| seen|...
CVE-2026-27836
creationtimestamp| type| source ---|---|--- 2026-02-27 12:36:41+00:00| published-proof-of-concept| https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-w22q-m2fm-x9f4 2026-02-28 01:40:11+00:00| seen| https://gist.github.com/alon710/ddf713b6949e1e0ad41c8c6c2f71cccf 2026-02-28...
CVE-2026-27821
GPAC is an open-source multimedia framework. In versions up to and including 26.02.0, a stack buffer overflow occurs during NHML file parsing in src/filters/dmxnhml.c. The value of the xmlHeaderEnd XML attribute is copied from att-value into szXmlHeaderEnd1000 using strcpy without any length...
CVE-2026-27821
GPAC is an open-source multimedia framework. In versions up to and including 26.02.0, a stack buffer overflow occurs during NHML file parsing in src/filters/dmxnhml.c. The value of the xmlHeaderEnd XML attribute is copied from att-value into szXmlHeaderEnd1000 using strcpy without any length...
CVE-2026-27821 GPAC NHML Demuxer (dmx_nhml.c) Vulnerable to Stack Buffer Overflow
GPAC is an open-source multimedia framework. In versions up to and including 26.02.0, a stack buffer overflow occurs during NHML file parsing in src/filters/dmxnhml.c. The value of the xmlHeaderEnd XML attribute is copied from att-value into szXmlHeaderEnd1000 using strcpy without any length...
CVE-2026-27821 GPAC NHML Demuxer (dmx_nhml.c) Vulnerable to Stack Buffer Overflow
GPAC is an open-source multimedia framework. In versions up to and including 26.02.0, a stack buffer overflow occurs during NHML file parsing in src/filters/dmxnhml.c. The value of the xmlHeaderEnd XML attribute is copied from att-value into szXmlHeaderEnd1000 using strcpy without any length...