PT-2026-50802

Name of the Vulnerable Software and Affected Versions M365 Copilot affected versions not specified Description A missing authentication flaw in a critical function allows an unauthorized attacker to disclose information over a network. Recommendations At the moment, there is no information about ...

CVE-2026-38714

InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) are susceptible to a command injection vulnerability within the Python configuration function . A remote attacker can exploit this by providing crafted input to execute arbitrary commands with root privileges...

CVE-2026-38716

InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 including earlier versions were discovered to contain a command injection vulnerability in the Python application export function. This vulnerability allows remote attackers to execute arbitrary commands as root via a crafted input...

CVE-2026-38716

InHand Networks IR912 and IR915 (versions V1.0.0.r20042 and earlier) are susceptible to a command injection vulnerability within the Python application export function . This flaw allows remote attackers to execute arbitrary commands as root by providing crafted input. Exploitation details are no...

EUVD-2026-37919

InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 including earlier versions were discovered to contain a command injection vulnerability in the Python application export function. This vulnerability allows remote attackers to execute arbitrary commands as root via a crafted input...

CVE-2026-38716

InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 including earlier versions were discovered to contain a command injection vulnerability in the Python application export function. This vulnerability allows remote attackers to execute arbitrary commands as root via a crafted input...

CVE-2026-38714: Undefined Security Weakness

InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 including earlier versions were discovered to contain a command injection vulnerability in the Python configuration function. This vulnerability allows remote attackers to execute arbitrary commands as root via a crafted input...

CVE-2026-38715: Undefined Security Weakness

InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 including earlier versions were discovered to contain a command injection vulnerability in the log viewing function. This vulnerability allows remote attackers to execute arbitrary commands as root via a crafted input...

PT-2026-50629

The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2.6. This is due to missing or incorrect nonce validation on the replace file function. This makes i...

CVE-2026-38716

InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 including earlier versions were discovered to contain a command injection vulnerability in the Python application export function. This vulnerability allows remote attackers to execute arbitrary commands as root via a crafted input...

PT-2026-61795

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 1.7.2 Description The codeMode tool in src/praisonai-ts/src/tools/builtins/code-mode.ts executes model-generated JavaScript using new Function and a withsandbox pattern. The implementation relies on a...

CVE-2026-9692: Generation of Predictable Numbers or Identifiers

Mojolicious::Sessions::Storable versions through 0.05 for Perl generate session ids insecurely. The default session id generator returns a SHA-1 hash seeded with the built-in rand function, the epoch time, the heap address of an anonymous hash, and the PID. These are predictable or low-entropy...

ROS-20260618-73-0004

The vulnerability of the BilateralBlurImage method in the AcquireBilateralTLS function of the ImageMagick console graphics editor is related to the release of an incorrect pointer. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

PT-2026-61792

Name of the Vulnerable Software and Affected Versions PraisonAI versions 1.4.0 through 1.7.1 Description The codeMode function in src/praisonai-ts/src/tools/builtins/code-mode.ts executes untrusted JavaScript using new Function within a withsandbox block. The system relies on a limited source-cod...

ROS-20260618-73-0008

The vulnerability of the ReadXBMImage function in the console-based ImageMagick graphics editor is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

PT-2026-50699

InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 including earlier versions were discovered to contain a command injection vulnerability in the Python application export function. This vulnerability allows remote attackers to execute arbitrary commands as root via a crafted input...

PT-2026-61769

Name of the Vulnerable Software and Affected Versions PraisonAI versions 3.9.24 through 4.6.57 Description Server-Side Request Forgery SSRF is possible in the SpiderTools.scrape page function, which is also utilized by extract links, crawl, and extract text. While the software validates the initi...

Linux kernel act_pedit Heap Buffer Overflow DoS

The vulnerability of the tcfpeditact function in the actpedit module of Linux kernel systems is related to writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to cause system failures or gain increased privileges...

SAP NetWeaver ABAP Data Compromise

The vulnerability of SAP software integration platforms such as SAP NetWeaver AS ABAP and SAP NetWeaver ABAP is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

Splunk Enterprise Missing Authentication for Critical Function Vulnerability

Splunk Enterprise contains a missing authentication for critical function vulnerability which could allow an unauthenticated user to create or truncate arbitrary files through a PostgreSQL sidecar service endpoint...