|
1671
|
- |
|
-
|
-
|
Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to properly handle data supplied in certain requests, causing a service disruption. The manufacturer has r…
|
CWE-20
Improper Input Validation
|
CVE-2024-54011
|
2026-04-28 17:15 |
2026-04-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1672
|
5.9 |
MEDIUM
Network
|
-
|
-
|
In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registe…
|
CWE-191
Integer Underflow (Wrap or Wraparound)
|
CVE-2026-40356
|
2026-04-28 16:16 |
2026-04-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1673
|
6.4 |
MEDIUM
Network
|
-
|
-
|
The Social Post Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Threads embed handler in all versions up to, and including, 2.0.1. This is due to insufficient input sa…
|
CWE-79
Cross-site Scripting
|
CVE-2026-6809
|
2026-04-28 15:16 |
2026-04-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1674
|
6.4 |
MEDIUM
Network
|
-
|
-
|
The WPC Smart Messages for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'text' attribute of the `wpcsm_text_rotator` shortcode in all versions up to, and incl…
|
CWE-79
Cross-site Scripting
|
CVE-2026-6725
|
2026-04-28 15:16 |
2026-04-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1675
|
6.4 |
MEDIUM
Network
|
-
|
-
|
The Timeline Blocks for Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'titleTag' attribute of the timeline-blocks/tb-timeline-blocks block in all versions up to,…
|
CWE-79
Cross-site Scripting
|
CVE-2026-6551
|
2026-04-28 15:16 |
2026-04-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1676
|
7.2 |
HIGH
Network
|
-
|
-
|
A flaw has been found in Totolink N300RT 3.4.0-B20250430. This affects an unknown function of the file /boafrm/formIpQoS. Executing a manipulation of the argument entry_name can lead to buffer overfl…
|
CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error')
Classic Buffer Overflow
|
CVE-2026-7219
|
2026-04-28 13:16 |
2026-04-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1677
|
7.2 |
HIGH
Network
|
-
|
-
|
A vulnerability was detected in Totolink N300RT 3.4.0-B20250430. The impacted element is the function is_cmd_string_valid of the file /boafrm/formWsc of the component libapmib.so. Performing a manipu…
|
CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error')
Classic Buffer Overflow
|
CVE-2026-7218
|
2026-04-28 12:16 |
2026-04-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1678
|
5.3 |
MEDIUM
Network
|
-
|
-
|
A security vulnerability has been detected in Deepractice PromptX up to 2.4.0. The affected element is the function read_docx/read_xlsx/read_pptx/list_xlsx_sheets/read_pdf of the file packages/mcp-of…
|
CWE-22
CWE-36
Path Traversal
Absolute Path Traversal
|
CVE-2026-7217
|
2026-04-28 12:16 |
2026-04-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1679
|
7.2 |
HIGH
Network
|
-
|
-
|
A post-authentication command injection vulnerability in the “DomainName” parameter of the DHCP configuration file in Zyxel DX3301-T0 and EX3301-T0 firmware versions through 5.50(ABVY.7.1)C0 could al…
|
CWE-78
OS Command
|
CVE-2026-1460
|
2026-04-28 12:16 |
2026-04-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1680
|
6.8 |
MEDIUM
Adjacent
|
-
|
-
|
A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated, adjacent attacker with a…
|
CWE-78
OS Command
|
CVE-2026-0711
|
2026-04-28 12:16 |
2026-04-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
