9219 matches found
EUVD-2026-1446
KAYSUS KS-WR1200 routers with firmware 107 expose SSH and TELNET services on the LAN interface with hardcoded root credentials root:12345678. The administrator cannot disable these services or change the hardcoded password. Changing the management GUI password does not affect SSH/TELNET...
EUVD-2026-1447
SQL Injection is present on the hfInventoryDistFormID parameter in the /PSP/appNET/Store/CartV12.aspx/GetUnitPrice endpoint in edu Business Solutions Print Shop Pro WebDesk version 18.34. Unsanitized user input is incorporated directly into SQL queries without proper parameterization or escaping...
EUVD-2026-1450
An issue in Insiders Technologies GmbH e-invoice pro before release 1 Service Pack 2 allows a remote attacker to cause a denial of service via a crafted script...
EUVD-2026-1501
An issue in GL Inet GL.Inet AX1800 Version 4.6.4 & 4.6.8 are vulnerable. GL.Inet AX1800 Version 4.6.4 & 4.6.8 in the GL.iNet custom opkg wrapper script located at /usr/libexec/opkg-call. The script is executed with root privileges when triggered via the LuCI web interface or authenticated API cal...
EUVD-2026-1511
There is an issue on the /PSP/appNET/Store/CartV12.aspx/GetUnitPrice endpoint in edu Business Solutions Print Shop Pro WebDesk version 18.34 that enables remote attacker to create financial discrepancies by purchasing items with a negative quantity. This vulnerability is possible due to reliance ...
cups security update
1:2.3.3op2-34.2 - fix use-after-free reported by OSH 1:2.3.3op2-34.1 - RHEL-129746 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129738 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues...
CVE-2017-20212
creationtimestamp| type| source ---|---|--- 2026-01-07 23:26:03+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115856399563013611 2026-01-08 01:13:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbusjaidei2c 2026-01-08 21:03:00+00:00| seen|...
CVE-2025-69264
pnpm is a package manager. Versions 10.0.0 through 10.25 allow git-hosted dependencies to execute arbitrary code during pnpm install, circumventing the v10 security feature "Dependency lifecycle scripts execution disabled by default". While pnpm v10 blocks postinstall scripts via the...
CVE-2026-22190
creationtimestamp| type| source ---|---|--- 2026-01-07 22:57:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbukwh4xrj2q 2026-01-12 18:07:39+00:00| seen| Telegram/Qn4zDx1gopuoFDdeF2t5YNGl6RathPfNxmtfN1VfQWpYEMo 2026-01-12 18:08:06+00:00| published-proof-of-concept|...
CVE-2025-60188
creationtimestamp| type| source ---|---|--- 2026-01-07 20:48:10+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-60188.yaml 2026-01-07 23:00:13+00:00| published-proof-of-concept| Telegram/h5P8bfRy51cnS-yezftJbVpEO2Om2ofhpc-g7kq6JaOtWVE...
EUVD-2026-1172
An unused function in MicroServer can start a reverse SSH connection to a vendor registered domain, without mutual authentication. An attacker on the local network with admin access to the web server, and the ability to manipulate DNS responses, can redirect the SSH connection to an attacker...
CVE-2026-0668
creationtimestamp| type| source ---|---|--- 2026-01-07 18:47:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbu4wuxvnk2u 2026-01-24 08:20:31+00:00| seen| https://bsky.app/profile/redmin78.bsky.social/post/3md5rt6thrc2n 2026-01-24 08:20:31+00:00| seen|...
EUVD-2026-1201
Cross-site Scripting vulnerability in Devolutions PowerShell Universal.This issue affects Powershell Universal: before 4.5.6, before 5.6.13...
EUVD-2026-1192
Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC requests that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak sensitive information or to restart, resulting in an interruption of packet inspection. This vulnerabili...
EUVD-2026-1223
Missing Authorization vulnerability in POSIMYTH Innovation The Plus Addons for Elementor Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Plus Addons for Elementor Pro: from n/a before 6.3.7...
EUVD-2026-1234
Not used...
EUVD-2026-1242
EUVD-2026-1242...
EUVD-2026-1283
EUVD-2026-1283...