Archive
12 February 2026
Vulnerabilities first published on this day (UTC), newest first.
128 results · Feed
-
High 7.5
p2r3 Bareiron commit: 8e4d4020d is vulnerable to Buffer Overflow, which allows unauthenticated remote attackers to caus…
-
Medium 6.5
@farmfe/core is Missing Origin Validation in WebSocket
npm @farmfe/core before 1.7.6 is Missing Origin Validation in WebSocket. The development (hot module reloading) server does not validate origin when connecting to a WebSocket client. This allows attackers to surveil developers running Farm who visit their web…
-
Critical 9.8
CordysCRM 1.4.1 is vulnerable to SQL Injection in the employee list query interface (/user/list) via the departmentIds …
-
Medium 6.1
lty628 aidigu v1.9.1 is vulnerable to Cross Site Scripting (XSS) exists in the /setting/ page where the "intro" field i…
-
Critical 9.8
webfsd 1.21 is vulnerable to a Buffer Overflow via a crafted request. This is due to the filename variable
-
High 7.5CVE-2025-70886 Public exploit
An issue in halo v.2.22.4 and before allows a remote attacker to cause a denial of service via a crafted payload to the…
-
Medium 5.5
A cross-site scripting (XSS) vulnerability in the Item Kits function of OpenSourcePOS v3.4.1 allows attackers to execut…
-
Medium 5.4
grub-btrfs through 2026-01-31 (on Arch Linux and derivative distributions) allows initramfs OS command injection becaus…