EUVD-2026-1808

Not used...

EUVD-2026-1812

Not used...

EUVD-2026-1793

Improper access control in SLocation prior to SMR Jan-2026 Release 1 allows local attackers to execute the privileged APIs...

EUVD-2026-1798

Use after free in DualDAR prior to SMR Jan-2026 Release 1 allows local privileged attackers to execute arbitrary code...

EUVD-2026-1733

The NEX-Forms WordPress plugin before 9.1.8 does not sanitise and escape some of its settings. The NEX-Forms WordPress plugin before 9.1.8 can be configured in such a way that could allow subscribers to perform Stored Cross-Site Scripting...

CVE-2025-66315

creationtimestamp| type| source ---|---|--- 2026-01-09 05:19:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbxqqeskrz2c 2026-01-09 06:24:23+00:00| seen| https://social.circl.lu/users/cedric/statuses/115863706874317663...

EUVD-2026-1818

EUVD-2026-1818...

EUVD-2026-1727

In TIM BPM Suite/ TIM FLOW through 9.1.2 multiple Hibernate Query Language injection vulnerabilities exist which allow a low privileged user to extract passwords of other users and access sensitive data of another user...

EUVD-2026-1722

An issue in TIM Solution GmbH TIM BPM Suite & TIM FLOW before v.9.1.2 allows a remote attacker to escalate privileges via the application stores password hashes in MD5 format...

EUVD-2026-1715

In TIM BPM Suite/ TIM FLOW through 9.1.2 multiple Authorization Bypass vulnerabilities exists which allow a low privileged user to download password hashes of other user, access work items of other user, modify restricted content in workflows, modify the applications logo and manipulate the profi...

CVE-2025-7570

creationtimestamp| type| source ---|---|--- 2026-01-08 20:16:47+00:00| published-proof-of-concept| Telegram/Cn8vIJLaV7iMh-CyfjikPOzCxc7p0elltwE2p2hKGqbJ5bI...

CVE-2025-22509

creationtimestamp| type| source ---|---|--- 2026-01-08 18:13:25+00:00| seen| Telegram/0IylyGSboEmKCHUPY4eAowSbZvYOKrVocDJ9Z5IoL0N8fw 2026-01-10 03:25:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mc22sjfb572u 2026-01-10 03:25:49+00:00| seen|...

RHSA-2026:0386

creationtimestamp| type| source ---|---|--- 2026-01-08 18:11:57+00:00| published-proof-of-concept| Telegram/Lge4284wsR8RZQjN49TNfOaqkj39MhV6KOAFAkydmYlrvo...

CVE-2025-68151

creationtimestamp| type| source ---|---|--- 2026-01-08 17:15:19+00:00| seen| Telegram/GM-svWPekxp6fZc4gMlOvYkGHuylr07tc7mBU4KKuEApJ4 2026-01-08 17:15:40+00:00| seen| Telegram/KVWOQnBiY3Eem9HhxjtYUT7TdVna0GpQEMRBO0Jx4tvF1fc...

EUVD-2026-1485

OPEXUS eComplaint before version 9.0.45.0 allows an attacker to visit the the 'DocumentOpen.aspx' endpoint, iterate through predictable values of 'chargeNumber', and download any uploaded files...

EUVD-2026-1498

Missing Authorization vulnerability in Hakob Re Gallery & Responsive Photo Gallery Plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Re Gallery & Responsive Photo Gallery Plugin: from n/a through 1.17.18...

EUVD-2026-1495

Missing Authorization vulnerability in baqend Speed Kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Speed Kit: from n/a through 2.0.2...

EUVD-2026-1496

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BuddyDev MediaPress allows Stored XSS.This issue affects MediaPress: from n/a through 1.6.2...

EUVD-2026-1491

A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless Protocol to achieve a remote code execution RCE within the affected product. Affected Products: UBB-XG Version 1.2.2 and earlier UDB-Pro/UDB-Pro-Sector Version 1.4.1 and earlier UBB...

CVE-2025-13772

creationtimestamp| type| source ---|---|--- 2026-01-08 14:15:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mbw66qsi4d2u 2026-01-09 11:04:06+00:00| seen| Telegram/IU-GZhw3lwdB2YPQBPPJszhGuDqQLNcVlkfgMniUsf5QLI 2026-01-09 13:01:40+00:00| seen|...