Fedora 43 : python3.12 (2026-2c35952b90)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2c35952b90 advisory. - Security fix for CVE-2025-12084 - Require at least the same expat version as used during the build time Tenable has extracted the preceding description blo...

PT-2026-1853

Name of the Vulnerable Software and Affected Versions Vivotek IP7137 camera versions prior to 0200a Description The Vivotek IP7137 camera is affected by an information disclosure issue. Live camera footage can be accessed through the Real Time Streaming Protocol RTSP on port 8554 without...

PT-2026-1767

Name of the Vulnerable Software and Affected Versions SlimStat Analytics plugin for WordPress versions through 5.3.3 Description The SlimStat Analytics plugin for WordPress is susceptible to Stored Cross-Site Scripting due to inadequate input sanitization and output escaping. The issue resides in...

CVE-2025-68716

creationtimestamp| type| source ---|---|--- 2026-01-08 22:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbwy75iho62u 2026-01-08 22:01:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbwyanfjhd2b 2026-01-08 23:49:35+00:00| seen|...

CVE-2026-22490

creationtimestamp| type| source ---|---|--- 2026-01-08 19:13:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbwou6l7s22y 2026-01-09 09:15:00+00:00| seen| https://gist.github.com/Darkcrai86/4ef2d396a3ac1e4263a2baa46ce63aea...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Linux Linux_Kernel

🚀 poc-CVE-2025-38352 - Easy Download for a Security Tool 📥...

Lego’s Smart Bricks explained: what they do, and what they don’t

Lego just made what it claims is its most important product release since it introduced minifigures in 1978. No, it's not yet another brand franchise. It's a computer in a brick. Called the Smart Brick , it's part of a broader system called Smart Play that Lego hopes will revolutionize your child...

CVE-2025-67930

creationtimestamp| type| source ---|---|--- 2026-01-08 10:55:40+00:00| seen| https://gist.github.com/Darkcrai86/03b0e48d5b4d029a67830c68808d6451 2026-01-08 17:14:39+00:00| seen| Telegram/CDQqMS4pNTE8cr8AaaEWI1JiQM6inncWlOHwQ4JVBFkRKQI...

CVE-2026-0674

creationtimestamp| type| source ---|---|--- 2026-01-08 10:49:42+00:00| seen| https://gist.github.com/Darkcrai86/a5dbd7ed932484b25cd9fc0ffcfb7658 2026-01-08 12:55:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbvzppce6o2e...

CVE-2025-12640

creationtimestamp| type| source ---|---|--- 2026-01-08 08:19:41+00:00| seen| https://gist.github.com/Darkcrai86/e42357ab53c7bfe525f19491ece85524...

CVE-2025-4953

creationtimestamp| type| source ---|---|--- 2026-01-08 05:04:36+00:00| seen| Telegram/WxrxB6nrBwZwliVPEyx9PqLlLqeacusuGOqkaC87KoVWLg0 2026-01-08 05:04:49+00:00| seen| Telegram/TWIFfksyEBRaPIfegQx7mJB8xPsFErQuFl3F3s90qTu9ejY...

CVE-2025-9318

The Quiz and Survey Master QSM – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to time-based SQL Injection via the ‘islinking’ parameter in all versions up to, and including, 10.3.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on t...

CVE-2026-0640

A weakness has been identified in Tenda AC23 16.03.07.52. This affects the function sscanf of the file /goform/PowerSaveSet. Executing a manipulation of the argument Time can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could ...

CVE-2026-21694

Titra is open source project time tracking software. Versions 0.99.49 and below have Improper Access Control, allowing users to view and edit other users' time entries in private projects they have not been granted access to. This issue is fixed in version 0.99.50...

CVE-2026-21695

Titra is open source project time tracking software. In versions 0.99.49 and below, an API has a Mass Assignment vulnerability which allows authenticated users to inject arbitrary fields into time entries, bypassing business logic controls via the customfields parameter. The affected endpoint use...

AI-Powered Algorithms for the Prevention and Detection of Computer Malware Infections

The rise in frequency and complexity of malware attacks are viewed as a major threat to modern digital infrastructure, which means that traditional signature-based detection methods are becoming less effective. As cyber threats continue to evolve, there is a growing need for intelligent systems t...

titra 安全漏洞

titra is an open source time tracking project by kromit. A security vulnerability exists in titra 0.99.49 and earlier versions , the vulnerability stems from a bulk assignment vulnerability in the API that allows authenticated users to bypass business logic controls by injecting arbitrary fields...

titra 访问控制错误漏洞

titra is a time tracking project from kromit open source. An access control error vulnerability exists in titra version 0.99.49 and earlier, which stems from improper access control and could lead to a user viewing and editing time entries in unauthorized private projects...

CVE-2026-21695

CVE-2026-21695 affects the open source time tracking software Titra. In versions ≤ 0.99.49, the API suffers a Mass Assignment vulnerability: the endpoint merges user-supplied input via the JavaScript spread operator into the database document (customfields), without validating which keys are perm...

CVE-2026-21695 Titra API Contains Mass Assignment Vulnerability

Titra is open source project time tracking software. In versions 0.99.49 and below, an API has a Mass Assignment vulnerability which allows authenticated users to inject arbitrary fields into time entries, bypassing business logic controls via the customfields parameter. The affected endpoint use...