9219 matches found
AiOPMSD Final SQL注入漏洞
AiOPMSD Final is a video stream download tool developed by AiOPMSD Corporation. Version 1.0.0 of AiOPMSD Final contains a SQL injection vulnerability. This vulnerability arises from injecting malicious code through the year parameter, potentially allowing unauthenticated attackers to execute...
PT-2026-45118
AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the year parameter. Attackers can send GET requests to year.php with crafted SQL payloads in the year parameter to extract sensiti...
CVE-2026-10107
creationtimestamp| type| source ---|---|--- 2026-05-29 22:28:33+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mmzlicfzir2o 2026-05-30 20:01:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn3tqyigao2p...
CVE-2026-48810
creationtimestamp| type| source ---|---|--- 2026-05-29 21:54:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmzjls6xuq2q...
CVE-2026-10062
creationtimestamp| type| source ---|---|--- 2026-05-29 17:25:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmz2lnkykd2j 2026-05-30 22:01:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn42gsxz3726 2026-06-22 00:24:41+00:00| seen|...
CVE-2026-45578
creationtimestamp| type| source ---|---|--- 2026-05-29 15:01:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmysj634ah27 2026-05-29 15:39:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmyungunn52c 2026-07-20 23:00:44+00:00| seen|...
CVE-2026-42398
creationtimestamp| type| source ---|---|--- 2026-05-29 14:45:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmyrmbdqgh2a...
CVE-2026-46174
creationtimestamp| type| source ---|---|--- 2026-05-29 14:40:12+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmyrdb3ep623 2026-07-28 16:51:16+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04 2026-07-31 13:31:26+00:00| seen|...
CVE-2026-49318
This CVE affects the Infotainment / Digital Round display in the Indian Motorcycle Scout Bobber + Tech 2025 model year. The root cause is an incorrect behavior order during boot: the system uses the presence of Wireless Control Module (WCM) traffic as a proxy for whether an immobilizer is fitted....
CVE-2025-41280
creationtimestamp| type| source ---|---|--- 2026-05-29 13:16:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmymof6alp2r...
CVE-2025-41271
creationtimestamp| type| source ---|---|--- 2026-05-29 12:55:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmylhohk3x2r...
EUVD-2026-33296
Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass the PIN entry screen. The Infotainment uses presence of Wireless Control Module WCM traffic during its boot window as a...
CVE-2026-49323 Indian Scout Bobber 2025 WCM-to-ECM weak authentication
Weak authentication between the Wireless Control Module WCM and the Engine Control Module ECM of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker with read access to the in-vehicle network to recover the per-vehicle ECM immobilizer secret by passively...
CVE-2025-11262
creationtimestamp| type| source ---|---|--- 2026-05-29 09:38:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmyagwkhs42k 2026-06-09 19:00:13+00:00| published-proof-of-concept| Telegram/Twzxtbvyqic9grgE7JaZrbs3i9BOrZG8PBBvMyWgrTB7Ya8...
CVE-2026-49211
creationtimestamp| type| source ---|---|--- 2026-05-29 07:32:34+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmxzgmdwar2x...
CVE-2026-49210
creationtimestamp| type| source ---|---|--- 2026-05-29 07:32:30+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmxzghhkd52e...
CVE-2026-49322 Indian Scout Bobber 2025 Infotainment-to-WCM weak authentication allows recovery of user PIN from observed exchange
Weak authentication in the Wireless Control Module WCM of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker with read access to the in-vehicle network to recover the user-set unlock PIN by passively observing a single PIN authentication exchange. The...
CVE-2026-33384
creationtimestamp| type| source ---|---|--- 2026-05-29 07:15:00+00:00| seen| https://cert.pl/en/posts/2026/05/CVE-2026-33384...
