9220 matches found
EUVD-2026-0707
A vulnerability was identified in jackying H-ui.admin up to 3.1. This affects an unknown function in the library /lib/webuploader/0.1.5/server/preview.php. The manipulation leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit is publicly available and might...
EUVD-2026-0722
A vulnerability was found in Yonyou KSOA 9.0. The affected element is an unknown function of the file /worksheet/agentworksdel.jsp of the component HTTP GET Parameter Handler. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The...
EUVD-2026-0716
The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.24. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to...
EUVD-2026-0725
EUVD-2026-0725...
EUVD-2026-0684
SQL injection in gosaliajainam/online-movie-booking 5.5 in moviedetails.php allows attackers to gain sensitive information...
EUVD-2026-0658
An integer underflow vulnerability exists in the nextstate function in gpsd/packet.c of gpsd versions prior to commit ffa1d6f40bca0b035fc7f5e563160ebb67199da7. When parsing a NAVCOM packet, the payload length is calculated using lexer-length = sizetc - 4 without checking if the input byte c is le...
EUVD-2026-0661
gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/drivernmea2000.c file. The hnd129540 function, which handles NMEA2000 PGN 129540 GNSS Satellites in View packets, fails to validate the user-supplied satellite count against the size of the skyview...
CVE-2025-69413
In Gitea before 1.25.2, /api/v1/user has different responses for failed authentication depending on whether a username exists...
BELL-CVE-2023-54313
Bulletin has no description...
PT-2026-1006
CVE-2025-34464 + CVE-2025-34465 reserved for preauth exploit-chains among the last of the year 🥳 Thanks to @catc0n & @VulnCheckAI !...
A Bootiful Podcast: Apache Tomcat legend Mark Thomas (Happy new year!)
In this episode, I talk with Mark Thomas, the legendary and highly prolific committer to Apache Tomcat. Happy New Year!...
CVE-2020-36903
creationtimestamp| type| source ---|---|--- 2025-12-31 22:12:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbcv5b7uqt2c...
CVE-2021-47741
creationtimestamp| type| source ---|---|--- 2025-12-31 21:46:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbcto2fl2e2y 2026-01-05 16:34:13+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115843455585115998...
CVE-2021-47726
creationtimestamp| type| source ---|---|--- 2025-12-31 21:43:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbctiog24e2o 2026-01-05 16:34:13+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115843455585115998...
CVE-2025-47566
creationtimestamp| type| source ---|---|--- 2025-12-31 21:21:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbcsbcycru2y 2026-01-02 08:03:06+00:00| seen| https://gist.github.com/Darkcrai86/0f705377648c55f19c6926bcb4603e8e...
CVE-2022-50792
creationtimestamp| type| source ---|---|--- 2025-12-31 21:03:00+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mbcragvzbf2h...
EUVD-2025-205992
A weakness has been identified in Kohana KodiCMS up to 13.82.135. This affects the function like of the file cms/modules/pages/classes/kodicms/model/page.php of the component Search API Endpoint. Executing manipulation of the argument keyword can lead to sql injection. It is possible to launch th...
curl: A quiet New Year wish for security researchers
Hi curl Security Team and fellow security researchers, Sorry in advance if this isn’t a traditional security report. I know your time is valuable, and I truly respect the work you all do. I just wanted to take a quiet moment to wish every security researcher here those who report issues, those wh...