112833 matches found
CVE-2026-6027
A weakness has been identified in Totolink A7100RU 7.4cu.2313b20191024. This issue affects the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argument enable can lead to os command injection. The attack can be launched...
CVE-2026-6010
creationtimestamp| type| source ---|---|--- 2026-04-10 06:46:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj4pzqusti24...
CVE-2026-6027 Totolink A7100RU CGI cstecgi.cgi setUrlFilterRules os command injection
A weakness has been identified in Totolink A7100RU 7.4cu.2313b20191024. This issue affects the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argument enable can lead to os command injection. The attack can be launched...
CVE-2026-25406
creationtimestamp| type| source ---|---|--- 2026-04-10 05:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj4lqjxe572j...
CVE-2026-4977
creationtimestamp| type| source ---|---|--- 2026-04-10 02:26:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj4bhpid6y24 2026-04-19 16:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mjueyd5pfe2c...
CVE-2026-4664
creationtimestamp| type| source ---|---|--- 2026-04-10 02:16:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj4avng3zz2t 2026-04-19 20:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mjusfhmqdv2s...
CVE-2025-70797
Cross Site Scripting vulnerability in Limesurvey v.6.15.20+251021 allows a remote attacker to execute arbitrary code via the Boxtitle and boxurl parameters...
CVE-2026-5989
creationtimestamp| type| source ---|---|--- 2026-04-10 01:06:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj44ymxfzy2i 2026-04-10 01:19:02+00:00| seen| Telegram/r2aLRB54IhOSR-P7tVQ1PquPIQ5c0jGeGUejuuUUcNPCN8 2026-04-30 23:37:14+00:00| seen|...
@1eg/theme-editor-cli (>=0.13.0, <=1.17.0), @aicontextlab/cli (>=0.0.0-dev, <=0.2.2) +313 more potentially affected by CVE-2026-5986 via js-video-url-parser (>=0.2.8, <=0.5.1)
js-video-url-parser NPM version =0.2.8, =0.13.0, =0.0.0-dev, =0.2.5, =1.0.103, =0.12.77-beta.1, =0.1.0, =0.1.136, =1.2.8, =1.2.8, =1.2.8, =1.2.8, =1.2.8, =1.2.8, =1.2.10 and more Source cves: CVE-2026-5986 Source advisory: OSV:GHSA-8FGX-WGVR-PCX8...
Regular Expression Denial of Service (ReDoS)
Overview js-video-url-parser is an A parser to extract provider, video id, starttime and others from YouTube, Vimeo, ... urls Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the getTime function in lib/util.js. An attacker can cause excessive...
EUVD-2026-21236
A weakness has been identified in Zod jsVideoUrlParser up to 0.5.1. The impacted element is the function getTime in the library lib/util.js. This manipulation of the argument timestamp causes inefficient regular expression complexity. It is possible to initiate the attack remotely. The exploit ha...
@1eg/theme-editor-cli (>=0.13.0, <=1.17.0), @aicontextlab/cli (>=0.0.0-dev, <=0.2.2) +313 more potentially affected by CVE-2026-5986 via js-video-url-parser (>=0.2.8, <=0.5.1)
js-video-url-parser NPM version =0.2.8, =0.13.0, =0.0.0-dev, =0.2.5, =1.0.103, =0.12.77-beta.1, =0.1.0, =0.1.136, =1.2.8, =1.2.8, =1.2.8, =1.2.8, =1.2.8, =1.2.8, =1.2.10 and more Source cves: CVE-2026-5986 Source advisory: SNYK:JS-JSVIDEOURLPARSER-15995499...
GHSA-HGWR-WR8H-RXM7 Duplicate Advisory: OpenClaw: Google Chat app-url webhook auth accepted non-deployment add-on principals
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-mp66-rf4f-mhh8. This link is maintained to preserve external references. Original Description OpenClaw before 2026.3.22 contains an improper authentication verification vulnerability in Google Chat app-url webho...
PT-2026-32980
Summary DOMSanitizer::sanitize allows elements in SVG content but never inspects their text content. CSS url references and @import rules pass through unfiltered, causing the browser to issue HTTP requests to attacker-controlled hosts when the sanitized SVG is rendered. Details In...
The vulnerability of the Jolokia application programming interface of the Apache ActiveMQ messaging broker allows a perpetrator to execute arbitrary code.
The vulnerability of the Jolokia application programming interface of the Apache ActiveMQ messaging broker is related to deficiencies in the code generation management mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a configuration XML file...
RockyLinux 10 : git-lfs (RLSA-2026:7005)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:7005 advisory. net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 Tenable has extracted the preceding description block directly from the RockyLinux...
GeoNode 代码问题漏洞
GeoNode is an open-source platform that facilitates the creation, sharing, and collaborative use of geospatial data. Versions of GeoNode prior to 4.4.5 and 5.0.2 have code vulnerabilities due to insufficient validation of the docurl parameter, which may lead to server-side request forgeing attack...
Unity Linux 20.1060a / 20.1070a Security Update: grafana (UTSA-2026-007103)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007103 advisory. The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters in URLs is generally limited by the...
CVE-2026-35625
creationtimestamp| type| source ---|---|--- 2026-04-09 23:30:23+00:00| published-proof-of-concept| Telegram/n2dd6XRjJv9G8jt1S2EaZawu98TdZ3-sGq35ZGwXZFcMAwI 2026-04-10 07:11:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mj4rfvntzh27...
CVE-2026-5980
creationtimestamp| type| source ---|---|--- 2026-04-09 23:29:26+00:00| published-proof-of-concept| Telegram/RnbO6h7rE-8F1e1uXIlS73R4kRuAIo63byQ11pUP09Fz6LA 2026-04-10 07:24:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mj4s5okjf62m 2026-05-01 01:07:07+00:00| seen|...