247800 matches found
The vulnerability of the Web Speech component in the Firefox web browser and the Thunderbird email client allows attackers to compromise data integrity.
The vulnerability of the Web Speech component in the Firefox web browser and the Thunderbird email client involves bypassing authentication through spoofing. Exploiting this vulnerability allows a malicious actor to compromise data integrity...
PT-2026-69995
Name of the Vulnerable Software and Affected Versions TP-Link Aginet affected versions not specified Description Certain web interface components fail to properly validate and sanitize user-supplied input before passing it to system-level command execution functions. This allows an authenticated...
agama-web-ui-23+75.1a877fb50-50.1 on GA media (moderate)
agama-web-ui-23+75.1a877fb50-50.1 on GA media Announcement ID: openSUSE-SU-2026:11472-1 Rating: moderate Cross-References: CVE-2026-13311 CVSS scores: CVE-2026-13311 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-13311 SUSE : 8.7...
Linux Distros Unpatched Vulnerability : CVE-2026-66738
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SPIP before 4.4.18 contains a code injection vulnerability in SQLite-backed installations. The navigation menu endpoint improperly handles array-typed user inpu...
Cisco Integrated Management Controller Argument Injection (CVE-2026-20288) (cisco-sa-cimc-arg-inject-upSHdMfU)
According to its self-reported version, Cisco Integrated Management Controller is affected by a vulnerability. - A command injection vulnerability exists in the web-based management interface of Cisco Integrated Management Controller IMC due to improper validation of user-supplied input. An...
CVE-2026-19373
A weakness has been identified in PhialsBasement KoboldCPP-MCP-Server 1.0.0. Affected by this issue is the function makeRequest of the file src/index.ts of the component BaseConfigSchema. Executing a manipulation of the argument apiUrl can lead to server-side request forgery. It is possible to...
CVE-2026-19373
CVE-2026-19373 affects PhialsBasement KoboldCPP-MCP-Server 1.0.0. The issue is in the function makeRequest of src/index.ts within the BaseConfigSchema component, where manipulating the argument apiUrl can lead to server-side request forgery. The advisory notes that exploitation can be launched ag...
CVE-2026-65551
creationtimestamp| type| source ---|---|--- 2026-08-09 21:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msoizjv7sf2i 2026-08-10 17:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msqm3cst432j...
CVE-2026-19352 mifi lossless-cut Built-in HTTP API Service httpServer.ts server-side request forgery
A vulnerability was determined in mifi lossless-cut up to 3.69.0. Affected by this issue is some unknown functionality of the file src/main/httpServer.ts of the component Built-in HTTP API Service. Executing a manipulation can lead to server-side request forgery. The attack requires access to the...
What SecureIQLab Cloud WAAP 5.0 means for your application security
You cannot verify a vendor’s security claims from their own datasheet, including ours. That is why independent validation matters. In our recent guide to the best WAAP solutions Best WAAP Solutions 2026: Enterprise Buyer Guide, we argued that every serious shortlist should include independent...
CVE-2026-19342
CVE-2026-19342 affects code-projects Task Management System 1.0, specifically the Login component’s /index.php. The vulnerability arises from manipulating the Password argument, causing improper authentication. The issue is exploitable remotely, and public exploit details are reported. No remedia...
CVE-2026-17011
The vulnerability affects the Nexter Blocks WordPress plugin, specifically versions prior to 5.0.2. A REST endpoint does not restrict who can save global CSS, allowing users with at least the Contributor role to store arbitrary CSS that is rendered site-wide, enabling defacement, content hiding, ...
CVE-2026-16992
CVE-2026-16992 affects the WordPress plugin “Create by Mediavine”
CVE-2026-19337 adenot mcp-google-search read_webpage index.ts server-side request forgery
A vulnerability was determined in adenot mcp-google-search up to 0.3.1. Impacted is an unknown function of the file src/index.ts of the component readwebpage. Executing a manipulation of the argument url can lead to server-side request forgery. The attack is restricted to local execution. This...
EUVD-2026-54887
A vulnerability was determined in adenot mcp-google-search up to 0.3.1. Impacted is an unknown function of the file src/index.ts of the component readwebpage. Executing a manipulation of the argument url can lead to server-side request forgery. The attack is restricted to local execution. This...
OPENSUSE-SU-2026:11472-1 agama-web-ui-23+75.1a877fb50-50.1 on GA media
These are all security issues fixed in the agama-web-ui-23+75.1a877fb50-50.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-13330
creationtimestamp| type| source ---|---|--- 2026-08-08 19:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mslru2eia72i...
Exploit for CVE-2026-64638
XSS2Shell — CVE-2026-64638 PoC WordPress Pre-Auth XSS → RCE e...
