210 matches found
MINI-WPV6-XQJH-C7W9
Bulletin has no description...
MINI-QGX2-54QM-73WH
Bulletin has no description...
MINI-2GPX-XFJC-PJ7C
Bulletin has no description...
CVE-2026-73567
creationtimestamp| type| source ---|---|--- 2026-08-13 18:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msyb2gigt42p 2026-08-13 18:35:13+00:00| published-proof-of-concept| https://github.com/JuneAndGreen/sm-crypto/security/advisories/GHSA-vh45-f885-3848...
CVE-2026-66747
Zbtlink router firmware ships an embedded remote-control implant, ENDLESSDOORS, present in every published build across the product line. It is the open-source ycsunjane/rctl tool built in as an OpenWrt package librctl.so, started at boot and run as root under the process name kworker to blend in...
CVE
Security Advisories & CVEs — Lyris Vale Vulnerabilities I've...
GO-2026-5689 Mailpit: Concurrent map read & write in proxy CSS rewriter - remote unauth crash (fatal error: concurrent map read and map write) in github.com/axllent/mailpit
Mailpit: Concurrent map read & write in proxy CSS rewriter - remote unauth crash fatal error: concurrent map read and map write in github.com/axllent/mailpit...
CVE-2026-12760
A denial-of-service DoS vulnerability has been identified in Tapo C200 v3 in the network packet handling logic due to improper handling of IPv4 fragmented packets. An unauthenticated adjacent attacker can send crafted packets to cause excessive resource consumption, leading to instability of the...
CVE-2026-56114
A flaw was found in dhcpcd. An unauthenticated attacker on the same network link could exploit a one-byte stack out-of-bounds write vulnerability in the dhcp6makemessage function. By sending a specially crafted DHCPv6 ADVERTISE message with an oversized option, the attacker can write beyond a...
Atlassian Confluence Server - Improper Authorization
All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. There is no impact to confidentiality as an attacker cannot exfiltrate any instance data. Atlassian Cloud sites are not affected by this vulnerability. If your Confluence site is accessed via an...
Mailpit: Concurrent map read & write in proxy CSS rewriter - remote unauth crash (fatal error: concurrent map read and map write)
Summary The screenshot/print proxy /proxy?data=… maintains a package-level assets mapstringMessageAssets cache, but reads the map without holding assetsMutex while a long-running cleanup goroutine and re-entrant CSS-rewriting code path concurrently write to it under the lock. When the...
Amazon Linux 2 : rclone, --advisory ALAS2-2026-3285 (ALAS-2026-3285)
The version of rclone installed on the remote host is prior to 1.55.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3285 advisory. Rclone is a command-line program to sync files and directories to and from different cloud storage providers. The RC...
Unauthenticated Arbitrary Plugin Upload in Alone Theme
The Alone – Charity Multipurpose Non-profit WordPress Theme theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the aloneimportpackinstallplugin function in all versions up to, and including, 7.8.3. id: CVE-2025-5394 info: name: Unauthenticated Arbitra...
Malicious Package
Overview ent-profile-unauth-msr-stop is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious code in ent-profile-unauth-msr-stop (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cccedcc6e7e3c24d5bf3abeb2d093bb12520a9973d6aaf7874d6559127e947c The package ent-profile-unauth-msr-stop was found to contain malicious code. Source: ghsa-malware...
MAL-2026-14 Malicious code in ent-profile-unauth-msr-stop (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cccedcc6e7e3c24d5bf3abeb2d093bb12520a9973d6aaf7874d6559127e947c The package ent-profile-unauth-msr-stop was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199958
A vulnerability was identified in moxi159753 Mogu Blog v2 up to 5.2. This issue affects some unknown processing of the file /storage/ of the component Storage Management Endpoint. The manipulation leads to missing authorization. The attack can be initiated remotely. The attack's complexity is rat...
CVE-2025-9172
The Vibes plugin for WordPress is vulnerable to time-based SQL Injection via the ‘resource’ parameter in all versions up to, and including, 2.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
CVE-2025-44178
DASAN GPON ONU H660WM H660WMR210825 is susceptible to improper access control under its default settings. Attackers can exploit this vulnerability to gain unauthorized access to sensitive information and modify its configuration via the UPnP protocol WAN sides without any authentication...