Overview
- themepassion
- Ultra Portfolio
- ultra-portfolio
22 Jan 2026
Published
23 Jan 2026
Updated
CVSS
Pending
EPSS
0.03%
KEV
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in themepassion Ultra Portfolio ultra-portfolio allows Blind SQL Injection.This issue affects Ultra Portfolio: from n/a through <= 6.7.
Statistics
- 1 Post
Last activity: 16 hours ago
Fediverse
🟠CVE-2025-69180 - High (8.8)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in themepassion Ultra Portfolio ultra-portfolio allows Blind SQL Injection.This issue affects Ultra Portfolio: from n/a through <= 6.7.
🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-69180/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
Overview
- Python Software Foundation
- CPython
01 Dec 2025
Published
22 Dec 2025
Updated
CVSS v4.0
MEDIUM (6.3)
EPSS
0.09%
KEV
Description
When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length. This allows a malicious server to cause the client to read large amounts of data into memory, potentially causing OOM or other DoS.
Statistics
- 2 Posts
Last activity: 7 hours ago
Bluesky
🚨 Attention System Administrators & DevOps Professionals! 🚨
A critical Denial-of-Service (DoS) vulnerability (CVE-2025-13836) has been patched in #Python 3.12 on Fedora 43. Read more: 👉 tinyurl.com/2pvtvzcv #Fedora #Security
URGENT: Patch #Python 3.11 on #Fedora43 now!
CVEs: CVE-2025-13836 (HTTP Client DoS) & CVE-2025-12084 (XML DoS). Read more: 👉 tinyurl.com/mrabktfb #Security #Fedora
Overview
- shinetheme
- Traveler
- traveler
22 Jan 2026
Published
23 Jan 2026
Updated
CVSS
Pending
EPSS
0.03%
KEV
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in shinetheme Traveler traveler allows Blind SQL Injection.This issue affects Traveler: from n/a through < 3.2.8.
Statistics
- 1 Post
Last activity: 16 hours ago
Fediverse
🟠CVE-2026-24367 - High (8.8)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in shinetheme Traveler traveler allows Blind SQL Injection.This issue affects Traveler: from n/a through < 3.2.8.
🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24367/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
Overview
- Wireshark Foundation
- Wireshark
14 Jan 2026
Published
14 Jan 2026
Updated
CVSS v3.1
MEDIUM (5.3)
EPSS
0.02%
KEV
Description
SOME/IP-SD protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service
Statistics
- 1 Post
Last activity: 10 hours ago
Bluesky
Security Advisory: Wireshark 4.6.3 Update
The #Wireshark Foundation and Red Hat have coordinated the release of version 4.6.3, addressing four medium-severity denial of service vulnerabilities (CVE-2026-0959 through CVE-2026-0962). Read more: 👉 tinyurl.com/mr26aymp #Fedora
Overview
- Wireshark Foundation
- Wireshark
14 Jan 2026
Published
14 Jan 2026
Updated
CVSS v3.1
MEDIUM (5.3)
EPSS
0.03%
KEV
Description
IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service
Statistics
- 1 Post
Last activity: 10 hours ago
Bluesky
Security Advisory: Wireshark 4.6.3 Update
The #Wireshark Foundation and Red Hat have coordinated the release of version 4.6.3, addressing four medium-severity denial of service vulnerabilities (CVE-2026-0959 through CVE-2026-0962). Read more: 👉 tinyurl.com/mr26aymp #Fedora
Overview
- Python Software Foundation
- CPython
03 Dec 2025
Published
14 Jan 2026
Updated
CVSS v4.0
MEDIUM (6.3)
EPSS
0.12%
KEV
Description
When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency on _clear_id_cache() the algorithm is quadratic. Availability can be impacted when building excessively nested documents.
Statistics
- 1 Post
Last activity: 7 hours ago
Bluesky
URGENT: Patch #Python 3.11 on #Fedora43 now!
CVEs: CVE-2025-13836 (HTTP Client DoS) & CVE-2025-12084 (XML DoS). Read more: 👉 tinyurl.com/mrabktfb #Security #Fedora