126004 matches found
CVE-2026-26699
CVE-2026-26699 affects sourcecodester Personnel Property Equipment System v1.0. Multiple sources report an arbitrary code execution vulnerability in ip/ppes/admin/admin_change_picture.php. The Red Hat/CIRCL/NVD entries confirm the vulnerable component, but do not provide detailed root-cause speci...
Personnel Property Equipment System 安全漏洞
Personnel Property Equipment System is a personnel property equipment management system developed by Jon Remus Sevellejo. Version 1.0 of Personnel Property Equipment System has security vulnerabilities; these vulnerabilities stem from arbitrary code execution in the...
D-Link DWR-M960: FormWlEncrypt file stack buffer overflow vulnerability
The D-Link DWR-M960 is a router produced by D-Link Corporation. The D-Link DWR-M960 has a stack buffer overflow vulnerability, which stems from incorrect handling of parameters in the file /boafrm/formWlEncrypt. Attackers can exploit this vulnerability to execute arbitrary code on the system or...
PT-2026-22682
Name of the Vulnerable Software and Affected Versions mem protect affected versions not specified Description A logic error exists in multiple functions within the mem protect.c file, potentially allowing for arbitrary code execution. Successful exploitation could lead to local privilege escalati...
Wethink 720yun 安全漏洞
Wethink 720yun is a VR panorama creation and content hosting platform developed by the Chinese company Wethink. Version 0.5.877 of Wethink 720yun contains a security vulnerability. This vulnerability stems from cross-site scripting vulnerabilities in the LoginComp and SignupComp modules, which ma...
Adobe After Effects suffers from an out-of-bounds write vulnerability (CNVD-2026-12691)
Adobe After Effects is a set of visual effects and motion graphics production software from the American company Audobee Adobe. The software is mainly used for 2D and 3D synthesis, animation and visual effects production. An out-of-bounds write vulnerability exists in Adobe After Effects 25.6 and...
D-Link DWR-M960 DWF file stack buffer overflow vulnerability
The D-Link DWR-M960 is a router produced by D-Link Corporation. The D-Link DWR-M960 formWlAc file contains a stack buffer overflow vulnerability. This vulnerability arises from incorrect handling of parameters in the file /boafrm/formWlAc, specifically the submit-url parameter. Attackers can...
Debian dla-4495 : thunderbird - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4495 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4495-1 [email protected]...
D-Link DWR-M960 formDdns File Buffer Overflow Vulnerability
The D-Link DWR-M960 is a router from China-based AUO D-Link. A buffer overflow vulnerability exists in the D-Link DWR-M960 formDdns file. The vulnerability stems from a misbehavior of the function sub4648F0 in the file /boafrm/formDdns in the DDNS Settings Handler component with respect to the...
PT-2026-22612
Name of the Vulnerable Software and Affected Versions sourcecodester Personnel Property Equipment System version 1.0 Description The software contains a flaw that allows for arbitrary code execution. This issue is present in the 'ip/ppes/admin/admin change picture.php' component. Recommendations ...
Adobe After Effects has an out-of-bounds write vulnerability
Adobe After Effects is a set of visual effects and motion graphics production software from the American company Audobee Adobe. The software is mainly used for 2D and 3D synthesis, animation and visual effects production. An out-of-bounds write vulnerability exists in Adobe After Effects 25.6 and...
D-Link DWR-M960: NTP file stack buffer overflow vulnerability
The D-Link DWR-M960 is a router produced by D-Link Corporation. The D-Link DWR-M960 has a stack buffer overflow vulnerability in its formNtp file. This vulnerability stems from an error in the operation of the submit-url parameter in the sub4611CC function within the NTP Configuration Endpoint...
OpenClaw OS Command Injection Vulnerability (CNVD-2026-13373)
OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from an operating system command injection vulnerability that stems from the failure of maintainer/developer scripts/update-clawtributors.ts to properly filter construct command special characters, commands...
D-Link DWR-M960 has a stack buffer overflow vulnerability in the formPortFw file
The D-Link DWR-M960 is a router produced by D-Link Corporation. The D-Link DWR-M960 has a stack buffer overflow vulnerability in its formPortFw file. This vulnerability stems from an incorrect operation of the submit-url parameter in the sub423E00 function within the Port Forwarding Configuration...
CVE-2026-26699
sourcecodester Personnel Property Equipment System v1.0 is vulnerable to arbitrary code execution in ip/ppes/admin/adminchangepicture.php...
RHEL 8 : openssl (RHSA-2026:3364)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:3364 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength...
RHEL 8 : openssl (RHSA-2026:3437)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:3437 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength...
[SECURITY] [DSA 6152-1] thunderbird security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6152-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 28, 2026 https://www.debian.org/security/faq -...
CVE-2026-2680
Reflected Cross-Site Scripting XSS on the A3factura web platform, in parameter 'customerVATNumber', in 'a3factura-app.wolterskluwer.es//incomes/salesDeliveryNotes' endpoint, which could allow an attacker to execute arbitrary code in the victim's browser...
