CVE-2026-75976

A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. Impacted is the function strcpy of the file /cgi-bin/wan.cgi of the component NVRAM. This manipulation of the argument wanl2tppassword causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been ma...

CVE-2025-11729

The PPWP: Password Protect Pages, Posts & Full or Partial Content plugin for WordPress is vulnerable to unauthorized access of data due to a improper capability check on the canaccess function in all versions up to, and including, 1.9.15. This makes it possible for authenticated attackers, with...

Exploit for CVE-2026-16732

cve-id Donate Support the maintenance of this project wit...

CVE-2026-75978 xianrendzw EasyReport QueryerFactory DataSourceController.java DataSourceController.add permission

A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522Beta. The affected element is the function DataSourceController.add of the file DataSourceController.java of the component QueryerFactory. Such manipulation of the argument queryerClass leads to permission issues...

CVE-2026-75978 xianrendzw EasyReport QueryerFactory DataSourceController.java DataSourceController.add permission

A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522Beta. The affected element is the function DataSourceController.add of the file DataSourceController.java of the component QueryerFactory. Such manipulation of the argument queryerClass leads to permission issues...

PT-2026-78704

A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected is the function popen/system of the file /cgi-bin/ping.cgi of the component ssi. Executing a manipulation of the argument ipaddr can lead to command injection. It is possible to launch the attack remotely. The exploit has...

PT-2026-78868

Name of the Vulnerable Software and Affected Versions mruby version 3.1.0 Description A flaw exists in the udiv function within the bigint.c file. A remote attacker can perform a manipulation that results in a floating point comparison using an incorrect operator. Recommendations Apply a patch to...

PT-2026-78668

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description An out-of-bounds write allows a local attacker to execute arbitrary code. An out-of-bounds write occurs when a program writes data past the end of the intended buffer,...

PT-2026-78834

A vulnerability was identified in TRENDnet TEW-755AP up to 20260702. Affected by this issue is some unknown functionality of the file /cgi-bin/wan.cgi of the component ssi. Such manipulation of the argument cameo.wan.wan pppoe password 00 leads to stack-based buffer overflow. The attack can be...

PT-2026-78833

A vulnerability was found in TRENDnet TEW-755AP up to 20260702. Affected is the function FUN 401000 of the file /sbin/mycli. The manipulation of the argument ssid results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used...

PT-2026-78862

A vulnerability was detected in code-projects Assessment Management 1.0. The affected element is an unknown function of the file /welcome.php. The manipulation of the argument userid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

PT-2026-78705

A vulnerability was identified in TRENDnet TV-IP751WIC 11.03.03. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/admin/set time.cgi of the component alphapd. The manipulation leads to command injection. The attack can be initiated remotely. The exploit is publicly...

PT-2026-78755

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.1 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14 Description Splunk Web fails to sufficiently validate dashboard content...

ROS-20260819-73-0031

The vulnerability in Vim relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260819-73-0047

The vulnerability in Tomcat relates to the failure to remove script-related HTML tags from web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

ROS-20260819-73-0052

The vulnerability in Tomcat11 is related to the implementation of incorrect control flow. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

ROS-20260819-73-0061

The vulnerability in Tomcat11 is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers, who operate remotely, to gain increased privileges...

ROS-20260819-73-0064

The vulnerability in Tomcat11 is related to incorrect processing of data with URL encoding. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

ROS-20260819-73-0016

The vulnerability in MediaWiki is related to the lack of protection for administrative data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

PT-2026-78263

Name of the Vulnerable Software and Affected Versions BusyBox versions prior to 1.30.1 Description A null pointer dereference occurs in the FEATURE WGET TIMEOUT handler within the networking/wget.c file. This issue is triggered by the manipulation of the -T argument and requires local access to b...