Windows Ancillary Function Driver Privilege Escalation

The vulnerability of the Windows Ancillary Function Driver for WinSock operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Ancillary Function Driver WinSock Privilege Escalation

The vulnerability of the Ancillary Function Driver for WinSock in Windows operating systems lies in the ability to exploit memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows Ancillary Function Driver WinSock Privilege Escalation

The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Remote Desktop Licensing Service Privilege Escalation

The vulnerability of the Remote Desktop Licensing Service for Windows operating systems is related to the lack of authentication for a critical function. Exploiting this vulnerability can allow attackers to increase their privileges...

Function Discovery Service Privilege Escalation

The vulnerability of the Function Discovery Service fdwsd.dll on Windows operating systems is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

Function Discovery Service Privilege Escalation

The vulnerability of the Function Discovery Service fdwsd.dll on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

PT-2026-33027

The OPEN-BRAIN plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.5.0. This is due to missing nonce verification on the settings form in the func page main function. This makes it possible for unauthenticated attackers to inject malicious web...

CVE-2026-30993

Slah CMS v1.5.0 and below was discovered to contain a remote code execution RCE vulnerability in the session function at config.php. This vulnerability is exploitable via a crafted input...

CentSDR security vulnerability

CentSDR is a handheld software-defined radio receiver open-sourced by ttfrftech. There is a security vulnerability in CentSDR, which stems from a stack overflow issue in the Thread1 function...

CVE-2026-30364

CentSDR commit e40795 was discovered to contain a stack overflow in the "Thread1" function...

PT-2026-33068

Name of the Vulnerable Software and Affected Versions CentSDR version e40795 Description A stack overflow occurs in the Thread1 function. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

CVE-2026-30364

The CentSDR software, a handheld software-defined radio receiver open-sourced by ttfrftech , is vulnerable to a stack overflow in the Thread1 function within commit e40795 . This vulnerability allows for a High severity impact on availability (CVSS 3.1 score of 7.5) via a Network attack vector wi...

CVE-2026-30364

CentSDR commit e40795 was discovered to contain a stack overflow in the "Thread1" function...

CVE-2024-53412

Command injection in the connect function in NietThijmen ShoppingCart 0.0.2 allows an attacker to execute arbitrary shell commands and achieve remote code execution via injection of malicious payloads into the Port field...

PT-2026-33128

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A heap buffer over-read occurs in the icns slurp function when processing specially crafted ICNS image files. This can lead to application crashes or information disclosure. Recommendations At t...

PT-2026-45939

Name of the Vulnerable Software and Affected Versions FRRouting versions stable/10.0 through stable/10.6 Description Missing input validation in the rfapiRibBi2Ri function rfapi rib.c allows attackers to cause a Denial of Service DoS by supplying a crafted BGP UPDATE message. Recommendations At t...

WordPress plugin “Product Pricing Table” by WooBeWoo has security vulnerabilities.

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

Slah CMS security vulnerability

Slah CMS is a content management system developed by the Brazilian company Slah. Versions of Slah CMS prior to 1.5.0 contain security vulnerabilities. These vulnerabilities stem from defects in the session function located in the config.php file, which may lead to remote code execution...

CVE-2026-5088: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Apache::API::Password versions through 0.5.2 for Perl can generate insecure random values for salts. The makesalt and makesaltbcrypt methods will attept to load Crypt::URandom and then Bytes::Random::Secure to generate random bytes for the salt. If those modules are unavailable, it will simply...

RockyLinux 10 : vim (RLSA-2026:7711)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:7711 advisory. vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin CVE-2026-28417 vim: Vim: Denial of service and information disclosure vi...