The vulnerability of the ServiceWorker component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the ServiceWorker component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

PT-2026-83956

A vulnerability was found in FLVMeta up to 1.2.2. Affected is the function amf string new of the file src/amf.c of the component AMF String Processing. The manipulation of the argument length results in heap-based buffer overflow. The attack can be launched remotely. The exploit has been made...

CVE-2026-82597: Improper Neutralization of Special Elements used in a Command

A vulnerability was identified in TOTOLINK NR1800X 9.1.0u.6681B20230703. This affects the function setUssd of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ussd leads to command injection. The attack can be initiated remotely. The exploit is publicly available and might be used...

PT-2026-83697

A vulnerability was found in TOTOLINK NR1800X 9.1.0u.6681 B20230703. Impacted is the function setUploadSetting of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been made public...

ROS-20260831-73-0004

The vulnerability of the soapaddxmlref function in the PHP programming language is related to the possibility of using memory after it has been freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to compromise data integrity.

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow a remote attacker to compromise data integrity...

Fedora 43 : hcloud (2026-b661d1a235)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b661d1a235 advisory. Update to 1.67.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

The vulnerability of the WebSockets component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the WebSockets component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-81497

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - security update CVE-2026-81497 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable,...

ROS-20260831-73-0013

The vulnerability in golang-x-image is related to unlimited resource distribution. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the `bh1780_read_raw()` function in the `iio/light/bh1780.c` driver module of Linux’s kernel-based sensors allows a hacker to induce a service failure.

The vulnerability of the bh1780readraw function in the iio/light/bh1780.c driver module of Linux’s sensor drivers is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

CVE-2026-82595 D-Link DIR-825M System Command Execution formSysCmd sub_456CF4 command injection

A vulnerability was found in D-Link DIR-825M 1.1.8. Affected by this vulnerability is the function sub456CF4 of the file /boafrm/formSysCmd of the component System Command Execution. Performing a manipulation of the argument sysCmd results in command injection. It is possible to initiate the atta...

CVE-2026-82595

CVE-2026-82595 is a command injection vulnerability in D-Link DIR-825M firmware version 1.1.8 , located in the System Command Execution component (file /boafrm/formSysCmd, function sub_456CF4). Manipulating the sysCmd argument allows an authenticated remote attacker to inject and execute arbitrar...

CVE-2026-82595 D-Link DIR-825M System Command Execution formSysCmd sub_456CF4 command injection

A vulnerability was found in D-Link DIR-825M 1.1.8. Affected by this vulnerability is the function sub456CF4 of the file /boafrm/formSysCmd of the component System Command Execution. Performing a manipulation of the argument sysCmd results in command injection. It is possible to initiate the atta...

CVE-2026-82594

A vulnerability has been found in LogNet grpc-spring-boot-starter up to 5.2.0. Affected is an unknown function of the component Annotation Processing. Such manipulation leads to improper authorization. The attack may be performed from remote. A high complexity level is associated with this attack...

CVE-2026-82594 LogNet grpc-spring-boot-starter Annotation Processing improper authorization

A vulnerability has been found in LogNet grpc-spring-boot-starter up to 5.2.0. Affected is an unknown function of the component Annotation Processing. Such manipulation leads to improper authorization. The attack may be performed from remote. A high complexity level is associated with this attack...

CVE-2026-82594 LogNet grpc-spring-boot-starter Annotation Processing improper authorization

A vulnerability has been found in LogNet grpc-spring-boot-starter up to 5.2.0. Affected is an unknown function of the component Annotation Processing. Such manipulation leads to improper authorization. The attack may be performed from remote. A high complexity level is associated with this attack...

CVE-2026-82594 LogNet grpc-spring-boot-starter Annotation Processing improper authorization

A vulnerability has been found in LogNet grpc-spring-boot-starter up to 5.2.0. Affected is an unknown function of the component Annotation Processing. Such manipulation leads to improper authorization. The attack may be performed from remote. A high complexity level is associated with this attack...

CVE-2026-82594

LogNet grpc-spring-boot-starter (up to version 5.2.0 ) contains an improper authorization flaw in its Annotation Processing component, exploitable over the network. The specific function affected is described as unknown. The attack requires low privileges and has high complexity , limiting practi...

CVE-2026-82592

A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub46725C of the file /boafrm/formDiskFormat of the component Disk Formatting Handler Endpoint. The manipulation of the argument partition results in stack-based buffer overflow. The attack can be executed remotely...