CVE-2026-50774

An issue in GAPTEQ Designer v.3.5 allows a remote attacker to escalate privileges via the Company Manger role...

CVE-2026-50770

An issue in Squirro Cognitive Search before v.3.14.2 allows a remote attacker to escalate privileges via a crafted request...

The vulnerability of the f81604_read_int_callback() function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to improper validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Linux Distros Unpatched Vulnerability : CVE-2026-19967

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security flaw has been discovered in Open Asset Import Library Assimp 17c12da. Impacted is the function Assimp::Compression::decompressBlock of the file...

PT-2026-73268

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network...

CVE-2026-50774

An issue in GAPTEQ Designer v.3.5 allows a remote attacker to escalate privileges via the Company Manger role...

PT-2026-76676

A vulnerability has been found in jae-jae fetcher-mcp up to 0.3.9. Impacted is the function fetch url/fetch urls of the file /latest/meta-data/iam/security-credentials/ of the component URL Validation. Such manipulation leads to server-side request forgery. It is possible to launch the attack...

CVE-2026-67917

zuraCast versions ≤0.23.7 execute the db.sql file from a backup archive during restore without validation or sanitization, allowing SQL injection and privilege escalation. CVSS 9.8 (network, no auth). A PoC is referenced at https://github.com/luoxuanxi/SQL-Injection-PoC/tree/main/SQL-Injection-Po...

PT-2026-76602

A vulnerability was determined in Wavlink WN531P3 and WN535M1 V250922. Affected by this vulnerability is the function strcpy of the file /etc/lighttpd/www/cgi-bin/export pingortrace.cgi of the component Export Pingortrace CGI. Executing a manipulation of the argument HTTP COOKIE can lead to...

PT-2026-76746

An issue in GAPTEQ Designer v.3.5 allows a remote attacker to escalate privileges via the Company Manger role...

CVE-2026-67919

An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the PluginEndpoint.java, installFromUri method, and DefaultPluginApplicationContextFactory components...

PT-2026-76827

Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0 Description Remote cross site scripting occurs due to improper handling of the course argument within the '/BSCE2.php' endpoint. Cross site scripting is a technique where malicious...

EUVD-2026-60538

Tenda W20E V16.01.0.62782 /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemon and obtain root shell access...

PT-2026-76734

SQL Injection vulnerability in StudIP 6.0.x before 6.0.3 and 5.4.x before 5.4.12 allows a remote attacker to execute arbitrary code and obtain sensitive information via the store functions...

CVE-2026-50768

T-Systems ImageMaster v9.14.2.8.1 is affected by a file upload vulnerability in the add attachments feature of the "create new document" function, allowing a remote attacker to execute arbitrary code . The CVSS v3.1 score is 8.8 (HIGH) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. CISA's SSVC ...

CVE-2026-50770

Squirro Cognitive Search before v.3.14.2 is vulnerable to privilege escalation via a crafted request, rated CVSS 9.8 (critical). No exploit code or in-the-wild exploitation is documented; affected deployments should upgrade to v3.14.2 or later.

CVE-2026-50770

An issue in Squirro Cognitive Search before v.3.14.2 allows a remote attacker to escalate privileges via a crafted request...

CVE-2026-68005

An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...

Vulnerability of components of Linux operating system’s kernel’s RDS, allowing a hacker to cause a service failure

The vulnerability of Linux operating system kernel’s rds components is related to incomplete recognition of internal states. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Apache Tomcat application server, related to the use of cryptographic algorithms containing vulnerabilities, allows attackers to alter the order of preference for encryption.

The vulnerability of the Apache Tomcat application server is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability allows a remote attacker to alter the encryption preferences...