Toreon

Latest CVEs · RSS

• CVE-2026-9177 2026-07-29 · CVSS 9.4
  A Server-Side Template Injection (SSTI) vulnerability was identified in the mail template functionality of the Axway SecureTransport product in version 5.5-202
• CVE-2026-12527 2026-06-18 · CVSS 6.0
  A broken authorization boundary in the RTSP media delivery pipeline of Shenzhen Liandian Communication Technology LTD V380 IP Camera firmware AppFHE1_V1.0.6.020
• CVE-2026-4255 2026-03-16 · CVSS 8.4
  A DLL search order hijacking vulnerability in Thermalright TR-VISION HOME on Windows (64-bit) allows a local attacker to escalate privileges via DLL side-loadin
• CVE-2025-12642 2025-11-03 · CVSS 6.9
  lighttpd1.4.80 incorrectly merged trailer fields into headers after http request parsing. This behavior can be exploited to conduct HTTP Header Smuggling attack
• CVE-2025-9709 2025-09-05 · CVSS 8.6
  On-Chip Debug and Test Interface With Improper Access Control and Improper Protection against Electromagnetic Fault Injection (EM-FI) in Nordic Semiconductor nR
• CVE-2025-7202 2025-08-06 · CVSS 5.1
  A Cross-Site Request Forgery (CSRF) in Elgato's Key Lights and related light products allows an attacker to host a malicious webpage that remotely controlles th
• CVE-2025-7503 2025-07-11 · CVSS 10.0
  An OEM IP camera manufactured by Shenzhen Liandian Communication Technology LTD exposes a Telnet service (port 23) with undocumented, default credentials. The T
• CVE-2025-7346 2025-07-08 · CVSS 8.7
  Any unauthenticated attacker can bypass the localhost restrictions posed by the application and utilize this to create arbitrary packages
• CVE-2025-6563 2025-07-03 · CVSS 4.8
  A cross-site scripting vulnerability is present in the hotspot of MikroTik's RouterOS on versions below 7.19.2. An attacker can inject the `javascript` protocol