EUVD-2026-62402

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...

EUVD-2026-62398

nnn is vulnerable to Out-of-Bound write vulnerability. Due to lack of validation of attacker-controlled length fields deserialized from a session file, a crafted session file can cause nnn to write data beyond the bounds of fixed-size global buffers when loaded with the -s option. An attacker who...

CVE-2026-18372

CSS injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated vault administrator to inject arbitrary CSS, affecting the web user interface displayed to other vault users...

CVE-2026-18371

HTML injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated attacker to affect web user interface contents displayed to other users...

CVE-2026-18371 HTML injection in M-Files Web

HTML injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated attacker to affect web user interface contents displayed to other users...

westone-CVE-2020-14883-scanner

westone-CVE-2020-14883-scanner Un attaccante remoto può costruire una richiesta HTTP speciale per assumere il controllo della Console di WebLogic Server senza autenticazione. Installazione e utilizzo git clone https://github.com/Osyanina/westone-CVE-2020-14883-scanner.git cd...

CVE-2026-76045

A flaw was found in WebGL in Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code within the browser's sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page, leading to a high-severity security risk...

CVE-2026-74321

A flaw was found in the btrfs file system component of the Linux kernel. This vulnerability occurs in the btrfsrundelayedrefs function when an error condition is not properly handled, leading to an invalid pointer dereference. A local attacker could potentially exploit this flaw to cause a system...

CVE-2023-42829

CVE-2023-42829; 'Eine App könnte möglicherweise auf SSH-Passphrasen zugreifen' Dieses Dokument enthält sowohl eine Analyse einer Logik-Schwachstelle, die im ssh-Binary auf macOS identifiziert wurde meine erste Software-Sicherheitslücke!, als auch eine Patch-Analyse, die zeigt, wie Apple die...

CVE-2023-31711

CVE-2023-31711 Fehlerhafte Zugriffskontrolle in ZKTECO ermöglicht entfernten Angreifern, beliebige Dateien über die administrative API zu lesen. Installieren der erforderlichen Module Im Verzeichnis ZKTEco: $ pip install -r ./pyzatt/requirementsdev.txt Ausführen des Exploits Im Verzeichnis ZKTEco...

CVE-2023-2982-POC

CVE-2023-2982 WordPress Social Login and Register Discord, Google, Twitter, LinkedIn = 7.6.4 - Umgehung der Authentifizierung WordPress Social Login und Registrierung Discord, Google, Twitter, LinkedIn =7.6.4-Umgehung der Authentifizierung Info Das WordPress-Plugin Social Login and Register...

CVE-2026-76041

A flaw was found in chromium-browser. An information leak in the Skia component allows a remote attacker to potentially bypass the web origin policy by crafting a malicious HTML page. This could lead to unauthorized access to sensitive information across different web origins. Mitigation Avoid...

CVE-2026-76037

A flaw was found in Google Chrome. A local attacker could exploit a link following vulnerability within the CredentialProvider component. This vulnerability allows for the execution of arbitrary code outside the browser's security sandbox through a local program. Mitigation Mitigation for this...

CVE-2026-72275

A flaw was found in the Linux kernel's fbdev broadsheetfb component. This issue arises when memory allocated for page references is not properly released during an error in the broadsheetfbprobe function. This oversight could lead to a memory leak, potentially allowing a local attacker to cause...

CVE-2026-72100

A flaw was found in the Linux kernel's dm-integrity component. This issue occurs when the dmintegritychecklimits function fails, leading to a resource remaining locked. A local attacker could potentially trigger this condition, resulting in a system deadlock and a Denial of Service DoS...

CVE-2026-72403

A flaw was found in the ALSA FireWire Control Protocol FCP component of the Linux kernel. A local attacker with a specially crafted USB device could trigger a NULL pointer dereference. This occurs because the fcpfindfcinterface function attempts to access an endpoint descriptor from a malformed U...

EUVD-2025-210740

The PPWP: Password Protect Pages, Posts & Full or Partial Content plugin for WordPress is vulnerable to unauthorized access of data due to a improper capability check on the canaccess function in all versions up to, and including, 1.9.15. This makes it possible for authenticated attackers, with...

PT-2026-78361

Name of the Vulnerable Software and Affected Versions nnn version 5.2 Description An Out-of-Bound write issue exists due to insufficient validation of attacker-controlled length fields during the deserialization of session files. When a crafted session file is loaded using the -s option, the...

PT-2026-78670

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description Remote attackers can execute arbitrary code due to improper validation of network-supplied pointers. Recommendations At the moment, there is no information about a newer...

PT-2026-78365

Name of the Vulnerable Software and Affected Versions Dell OpenManage Enterprise versions prior to 4.7.0 Description Improper Privilege Management allows a high privileged attacker with remote access to achieve elevation of privileges. Recommendations Update Dell OpenManage Enterprise to version...