EUVD-2026-3236

A weakness has been identified in TOTOLINK A3700R 9.1.2u.5822B20200513. This affects the function setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument ssid can lead to buffer overflow. The attack may be launched remotely. The exploit has been made availab...

CVE-2026-1138

creationtimestamp| type| source ---|---|--- 2026-01-19 06:03:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcqxtdxnou2i 2026-01-19 07:03:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcr365dfth2v...

EUVD-2026-3253

EUVD-2026-3253...

CVE-2024-34062

creationtimestamp| type| source ---|---|--- 2026-01-19 00:13:16+00:00| seen| https://gist.github.com/konard/d58e8c4af5b597bab2b5292c27e4c7c5 2026-01-19 11:27:47+00:00| seen| https://gist.github.com/konard/d865b38bfca9907df1e3a8dfefcf15f5...

AlmaLinux 10 : buildah (ALSA-2026:0436)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:0436 advisory. golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSHAGENTSUCCESS CVE-2025-47913 Tenable has extracted the precedin...

CVE-2026-1158

creationtimestamp| type| source ---|---|--- 2026-01-18 20:46:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115918055933218922 2026-01-19 15:17:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcrwseoexj22 2026-01-19 18:11:36+00:00| seen|...

EUVD-2026-3181

A security flaw has been discovered in nicbarker clay up to 0.14. This affects the function ClayMeasureTextCached in the library clay.h. The manipulation results in null pointer dereference. The attack is only possible with local access. The exploit has been released to the public and may be used...

BELL-CVE-2025-71065

Bulletin has no description...

BELL-CVE-2025-68787

Bulletin has no description...

EUVD-2026-3182

A vulnerability was found in Sanluan PublicCMS up to 5.202506.d. Affected is the function delete of the file publiccms-trade/src/main/java/com/publiccms/controller/web/trade/TradeAddressController.java of the component Trade Address Deletion Endpoint. Performing a manipulation of the argument ids...

CVE-2025-12129

creationtimestamp| type| source ---|---|--- 2026-01-17 10:48:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcmgu6rhms2f...

CVE-2026-22816

creationtimestamp| type| source ---|---|--- 2026-01-17 01:53:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcliw3rlqm2i...

CVE-2024-8506

creationtimestamp| type| source ---|---|--- 2026-01-17 01:29:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mclhmq5qz42x...

EUVD-2026-3168

EUVD-2026-3168...

CVE-2026-23800

creationtimestamp| type| source ---|---|--- 2026-01-16 22:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcl3whskkc2v 2026-01-16 22:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcl3wrinfk2v 2026-01-16 23:57:51+00:00| seen|...

CVE-2025-61873

Best Practical Request Tracker RT before 4.4.9, 5.0.9, and 6.0.2 allows CSV Injection via ticket values when TSV export is used...

EUVD-2026-2877

Poll, Survey & Quiz Maker Plugin by Opinion Stage Wordpress plugin versions prior to 19.6.25 contain a stored cross-site scripting XSS vulnerability via multiple parameters due to insufficient input validation and output escaping. An unauthenticated attacker can inject arbitrary script into conte...

CVE-2021-47847

creationtimestamp| type| source ---|---|--- 2026-01-16 20:12:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mckvvcz36h2x...

EUVD-2026-2867

Omni Secure Files plugin versions prior to 0.1.14 contain an arbitrary file upload vulnerability in the bundled plupload example endpoint. The /wp-content/plugins/omni-secure-files/plupload/examples/upload.php handler allows unauthenticated uploads without enforcing safe file type restrictions,...

EUVD-2026-2871

Disk Sorter Server 13.6.12 contains an unquoted service path vulnerability in its binary path configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Disk Sorter Server\bin\disksrs.exe' to inject malicious...