EUVD-2026-59996

A security flaw has been discovered in iatsiuk pptr-mcp up to 0.2.7. The impacted element is the function executeCode of the file src/vm-executor.ts of the component execute Tool. The manipulation results in code injection. The attack may be launched remotely. The exploit has been released to the...

EUVD-2026-60015

A security flaw has been discovered in Open Asset Import Library Assimp 17c12da. Impacted is the function Assimp::Compression::decompressBlock of the file code/Common/Compression.cpp of the component File Parser. Performing a manipulation results in heap-based buffer overflow. The attack may be...

CVE-2026-19967 Open Asset Import Library Assimp File Compression.cpp decompressBlock heap-based overflow

A security flaw has been discovered in Open Asset Import Library Assimp 17c12da. Impacted is the function Assimp::Compression::decompressBlock of the file code/Common/Compression.cpp of the component File Parser. Performing a manipulation results in heap-based buffer overflow. The attack may be...

CVE-2026-19967

A security flaw has been discovered in Open Asset Import Library Assimp 17c12da. Impacted is the function Assimp::Compression::decompressBlock of the file code/Common/Compression.cpp of the component File Parser. Performing a manipulation results in heap-based buffer overflow. The attack may be...

CVE-2026-19962

A flaw has been found in Edimax EW-7478APC 1.04. Affected by this vulnerability is the function setWAN of the file /goform/setWAN. Executing a manipulation of the argument pppUserName/pptpUserName/L2TPUserName can lead to command injection. The attack may be performed from remote. The exploit has...

CVE-2026-19966 CodeCanyon TimeCamp Integration for CRM Contact Information Update save_contact authorization

A vulnerability was identified in CodeCanyon TimeCamp Integration for CRM up to 2.8. This issue affects some unknown processing of the file /clients/savecontact of the component Contact Information Update. Such manipulation of the argument contactid leads to authorization bypass. The attack can b...

CVE-2026-19966 CodeCanyon TimeCamp Integration for CRM Contact Information Update save_contact authorization

A vulnerability was identified in CodeCanyon TimeCamp Integration for CRM up to 2.8. This issue affects some unknown processing of the file /clients/savecontact of the component Contact Information Update. Such manipulation of the argument contactid leads to authorization bypass. The attack can b...

EUVD-2026-60011

A vulnerability was identified in CodeCanyon TimeCamp Integration for CRM up to 2.8. This issue affects some unknown processing of the file /clients/savecontact of the component Contact Information Update. Such manipulation of the argument contactid leads to authorization bypass. The attack can b...

CVE-2026-19966

A vulnerability was identified in CodeCanyon TimeCamp Integration for CRM up to 2.8. This issue affects some unknown processing of the file /clients/savecontact of the component Contact Information Update. Such manipulation of the argument contactid leads to authorization bypass. The attack can b...

CVE-2026-19965 automad Password Reset Endpoint UserController.php requestPasswordResetToken response discrepancy

A vulnerability was determined in automad up to 2.0.0-beta.32. This vulnerability affects the function requestPasswordResetToken of the file automad/src/server/Controllers/API/UserController.php of the component Password Reset Endpoint. This manipulation of the argument name-or-email causes...

PT-2026-76827

Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0 Description Remote cross site scripting occurs due to improper handling of the course argument within the '/BSCE2.php' endpoint. Cross site scripting is a technique where malicious...

Linux Distros Unpatched Vulnerability : CVE-2026-19969

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in Open Asset Import Library Assimp 17c12da. The impacted element is the function...

Unity Linux 20.1070e Security Update: expat (UTSA-2026-099461)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099461 advisory. xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations. Tenable has extracted the preceding description block directly fr...

PT-2026-73338

Vulnerability in Oracle Java SE component: JavaFX. The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks require human...

PT-2026-76596

A vulnerability was found in Kira-Pgr PromptShopMCP up to 5bc0cd17358e19a5415d11a531088170d7b81452. Affected is the function download image of the file server.py of the component Image-Toolkit-MCP-Server. Performing a manipulation of the argument image url results in server-side request forgery...

PT-2026-73194

A weakness has been identified in Azuriom CMS up to 1.2.12. This issue affects the function transferMoney of the file app/Http/Controllers/ProfileController.php of the component Money Transfer Handler. This manipulation causes time-of-check time-of-use. The attack may be initiated remotely. A hig...

PT-2026-73220

Name of the Vulnerable Software and Affected Versions Open Asset Import Library Assimp version 17c12da Description A buffer overflow can be triggered remotely via the manipulation of the transmatrix count/pcBoneTransforms argument within the Assimp::MDLImporter::ParseBoneTrafoKeys 3DGS MDL7...

PT-2026-73212

Name of the Vulnerable Software and Affected Versions Webkul Bagisto versions prior to 2.4.5 Description A remote attack is possible due to an issue in the RMA State Validation component. Manipulation of the /customer/account/rma/update-status endpoint leads to the enforcement of a behavioral...

PT-2026-73184

A security flaw has been discovered in Open Asset Import Library Assimp 17c12da. Impacted is the function Assimp::Compression::decompressBlock of the file code/Common/Compression.cpp of the component File Parser. Performing a manipulation results in heap-based buffer overflow. The attack may be...

PT-2026-76765

A vulnerability was detected in TOTOLINK EX1200L 9.3.5u.6146 B20201023. This affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi. The manipulation results in null pointer dereference. The attack can be launched remotely. The exploit is now public and may be used...