The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server programs lies in the lack of security measures for website structures, allowing attackers to perform spoofing attacks.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishin...

CVE-2026-75011: Improper Neutralization of Special Elements used in a Command

A flaw has been found in kylecui NetForensicMCP 2.1.0. Impacted is the function execAsync of the file index.js. Executing a manipulation of the argument interface/protocol can lead to command injection. The attack may be launched remotely. The exploit has been published and may be used. The proje...

ROS-20260817-73-0210

The vulnerability in python-pillow is related to uncontrolled memory allocation. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

ROS-20260817-73-0033

The vulnerability of the Microsoft .NET software platform is related to incorrect encoding or escaping of output data. Exploiting this vulnerability can allow a malicious actor to execute an SSRF attack remotely...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101360)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101360 advisory. A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via...

CVE-2026-19965: Observable Response Discrepancy

A vulnerability was determined in automad up to 2.0.0-beta.32. This vulnerability affects the function requestPasswordResetToken of the file automad/src/server/Controllers/API/UserController.php of the component Password Reset Endpoint. This manipulation of the argument name-or-email causes...

ROS-20260817-73-0032

The vulnerability of the Microsoft .NET software platform is related to incorrect encoding or escaping of output data. Exploiting this vulnerability can allow a malicious actor to execute an SSRF attack remotely...

PT-2026-76602

A vulnerability was determined in Wavlink WN531P3 and WN535M1 V250922. Affected by this vulnerability is the function strcpy of the file /etc/lighttpd/www/cgi-bin/export pingortrace.cgi of the component Export Pingortrace CGI. Executing a manipulation of the argument HTTP COOKIE can lead to...

CVE-2026-67917

zuraCast versions up to and including 0.23.7 are vulnerable to a SQL injection flaw within the backup restore functionality. The root cause is that the azuracast:restore command executes the db.sql file extracted from a backup archive without any content validation or sanitization . This security...

EUVD-2026-60538

Tenda W20E V16.01.0.62782 /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemon and obtain root shell access...

PT-2026-76882

A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /edit subject2.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been made...

PT-2026-76827

Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0 Description Remote cross site scripting occurs due to improper handling of the course argument within the '/BSCE2.php' endpoint. Cross site scripting is a technique where malicious...

PT-2026-76746

An issue in GAPTEQ Designer v.3.5 allows a remote attacker to escalate privileges via the Company Manger role...

PT-2026-76765

A vulnerability was detected in TOTOLINK EX1200L 9.3.5u.6146 B20201023. This affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi. The manipulation results in null pointer dereference. The attack can be launched remotely. The exploit is now public and may be used...

PT-2026-76757

A flaw has been found in kylecui NetForensicMCP 2.1.0. Impacted is the function execAsync of the file index.js. Executing a manipulation of the argument interface/protocol can lead to command injection. The attack may be launched remotely. The exploit has been published and may be used. The proje...

PT-2026-76734

SQL Injection vulnerability in StudIP 6.0.x before 6.0.3 and 5.4.x before 5.4.12 allows a remote attacker to execute arbitrary code and obtain sensitive information via the store functions...

PT-2026-73201

A security vulnerability has been detected in GL.iNet BE9300 and MT6000 4.8.x. This vulnerability affects unknown code of the component Firewall-management RPC. The manipulation of the argument dest port/dest ip leads to os command injection. The attack may be initiated remotely. Upgrading to...

PT-2026-73204

A weakness has been identified in Adblock for Youtube Extension up to 7.2.1 on Chrome. The impacted element is the function updateDynamicRules of the file contentscript.js of the component Event Listener. This manipulation of the argument yt-anti-adblock-detected causes improper authorization. It...

PT-2026-73219

A weakness has been identified in code-projects Online Shopping System 1.0. Impacted is an unknown function of the file offersmail.php. Executing a manipulation of the argument email can lead to cross site scripting. The attack may be performed from remote. The exploit has been made available to...

PT-2026-73191

A security flaw has been discovered in treefrogframework treefrog-framework up to 2.11.2. This vulnerability affects the function std::strncmp of the file src/tsessioncookiestore.cpp of the component Session Cookie Handler. The manipulation results in improper authentication. The attack can be...