CVE-2026-75082

A flaw has been found in Webkul Bagisto up to 2.4.4. The affected element is an unknown function of the file /customer/register of the component Customer-Registration Notification Email. This manipulation of the argument firstname/lastname causes basic cross site scripting. It is possible to...

EUVD-2026-60559

A flaw has been found in Webkul Bagisto up to 2.4.4. The affected element is an unknown function of the file /customer/register of the component Customer-Registration Notification Email. This manipulation of the argument firstname/lastname causes basic cross site scripting. It is possible to...

CVE-2026-52481

CVE-2026-52481 affects the SJRC F11 / SJ-GPS-PRO consumer drone (firmware build 2019-09-17, Fullhan FH8856 SoC, Linux 3.0.8). The root cause is a hardcoded backdoor in the tcp_actions() function within the vs_play binary: any TCP packet sent to port 8888 beginning with the bytes da (0x64 0x61) ca...

CVE-2021-43718

An Authentication Bypass vulnerability exists in EPSON EH-TW5350 EPSON 150075647YWWV110, which could let a remote malicious user cause a Denial of Service via specially crafted series of HTTP...

CVE-2026-52481

An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the tcpactions function...

EUVD-2026-61282

Buffer Overflow vulnerability in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service via the NAS 5GS decoder chain, triggered when the message type byte of a NAS PDU is mutated...

PT-2026-76886

A vulnerability has been found in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /viewroom.php. Such manipulation of the argument delid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

EUVD-2026-61092

An arbitrary file write/directory traversal vulnerability in reportico-web = 8.1.0 allows remote attackers to create or overwrite files anywhere on the filesystem subject to the permissions of the web user by specifying a filename in the "saveTemplate" parameter in conjuction with...

CVE-2026-52610

An arbitrary file write/directory traversal vulnerability in reportico-web = 8.1.0 allows remote attackers to create or overwrite files anywhere on the filesystem subject to the permissions of the web user by specifying a filename in the "saveTemplate" parameter in conjuction with...

EUVD-2026-61281

An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the inetd service...

PT-2026-77816

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Hyperion Financial...

EUVD-2026-61279

An issue in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service via the ngapsendtonas function in src/amf/ngap-path.c...

PT-2026-78043

Name of the Vulnerable Software and Affected Versions Oracle Agile Engineering Data Management version 6.2.1 Description A flaw exists in the Web Services Security component of the Oracle Agile Engineering Data Management product. This issue allows an unauthenticated attacker with network access...

PT-2026-77329

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.169 Description A remote attacker who has compromised the renderer process can read memory outside the sandbox by using a crafted HTML page. This is caused by the use of an uninitialized resource in t...

PT-2026-77055

Name of the Vulnerable Software and Affected Versions Expat versions prior to 2.8.4 Description A denial of service issue exists due to quadratic algorithmic complexity within the storeAtts function in xmlparse.c. When processing N specified attributes with non-normalized values, the system...

forgejo-cli-0.6.0-2.1 on GA media (moderate)

forgejo-cli-0.6.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:11529-1 Rating: moderate Cross-References: CVE-2026-25541 CVSS scores: CVE-2026-25541 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-25541 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA...

CVE-2026-52480

CVE-2026-52480 affects the SJRC F11 SJ-GPS-PRO consumer drone (firmware build 2019-09-17, Fullhan FH8856 SoC, Linux 3.0.8). The inetd service exposes an unauthenticated FTP interface on port 21 , allowing an attacker on the adjacent network to obtain sensitive information without credentials. The...

Linux Distros Unpatched Vulnerability : CVE-2026-62898

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network. CVE-2026-62898 Note that Nessus relies on the presence ...

Photon OS 5.0: Dotnet PHSA-2026-5.0-92-0961

An update of the dotnet package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0961. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

PT-2026-76885

A flaw has been found in Webkul Bagisto up to 2.4.4. The affected element is an unknown function of the file /customer/register of the component Customer-Registration Notification Email. This manipulation of the argument first name/last name causes basic cross site scripting. It is possible to...