CVE-2026-2541 Micca KE700 Brute-force vulnerability due to low entropy

The Micca KE700 system relies on a 6-bit portion of an identifier for authentication within rolling codes, providing only 64 possible combinations. This low entropy allows an attacker to perform a brute-force attack against one component of the rolling code. Successful exploitation simplify an...

QNAP Qsync Central code issues and vulnerabilities

QNAP Qsync Central is a cloud-based file synchronization service for NAS devices provided by QNAP Technology Co., Ltd. Versions of QNAP Qsync Central prior to 5.0.0.4 contained a code vulnerability caused by a null pointer dereferencing, which could lead to a denial-of-service attack...

ActFax ActiveFax Server code-related vulnerabilities

ActFax ActiveFax Server is a fax server software developed by the Austrian company ActFax. Version 6.92 Build 0316 of ActFax ActiveFax Server has a code vulnerability. This vulnerability stems from an unquoted service path within the ActiveFaxServiceNT service, which may allow local attackers to...

QNAP Systems QuTS Hero code issue vulnerability

QNAP Systems QuTS hero is a software with data storage and management capabilities developed by QNAP Systems, a company based in Taiwan, China. Versions of QNAP Systems QuTS hero prior to h5.3.2.3354 contained a code vulnerability caused by a null pointer dereferencing, which could lead to a...

Apache Syncope Code Issue Vulnerability

Apache Syncope is the United States Apache Apache Foundation's set of open source digital identity management system for use in enterprise environments. The system supports identity management, role configuration and more. Apache Syncope there is a code problem vulnerability , the vulnerability...

CVE-2026-2163

A vulnerability was identified in D-Link DIR-600 up to 2.15WWb02. This vulnerability affects unknown code of the file ssdp.cgi. Such manipulation of the argument HTTPST/REMOTEADDR/REMOTEPORT/SERVERID leads to command injection. The attack may be launched remotely. The exploit is publicly availabl...

ALPS ALPINE HID Monitor Service Code Issues and Vulnerabilities

ALPS ALPINE HID Monitor Service is a human factors input device management service provided by ALPS ALPINE, a Japanese company. Version 8.1.0.10 of ALPS ALPINE HID Monitor Service contains a code vulnerability. This vulnerability stems from a service path that lacks quotation marks, which may all...

Wacom WTabletService code-related vulnerabilities

Wacom WTabletService is a core system service process of the Japanese Wacom company. Version 6.6.7-3 of Wacom WTabletService contains a code vulnerability. This vulnerability stems from a service path that lacks quotes, which may allow local attackers to execute malicious code and gain elevated...

AnyDesk code-related vulnerabilities

AnyDesk is a remote desktop connection software developed by the German company AnyDesk. Version 5.4.0 of AnyDesk contains a code vulnerability. This vulnerability stems from a service path in the Windows service configuration that lacks quotation marks, which may lead to privilege escalation...

Blesta code-related vulnerabilities

Blesta is a customer relationship management system developed by Blesta Inc. Versions of Blesta prior to 5.13.3 contained a code vulnerability caused by object injection...

Veritas NetBackup code-related vulnerabilities

Veritas NetBackup is a powerful enterprise-level data backup management software developed by Veritas Corporation in the United States. Version 7.0 of Veritas NetBackup contains a code vulnerability. This vulnerability stems from the lack of quotation marks around the NetBackup INET Daemon servic...

EnigmaSoft SpyHunter code-related vulnerabilities

EnigmaSoft SpyHunter is a malware prevention tool developed by the British company EnigmaSoft. EnigmaSoft SpyHunter has a code vulnerability that stems from service paths not enclosed in quotes. This vulnerability could allow local users to execute arbitrary code and gain elevated system privileg...

EUVD-2026-5012

A weakness has been identified in projectworlds House Rental and Property Listing 1.0. This vulnerability affects unknown code of the file /app/sms.php. This manipulation of the argument Message causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made...

CVE-2026-1552 SEMCMS SEMCMS_Info.php sql injection

A security vulnerability has been detected in SEMCMS 5.0. This vulnerability affects unknown code of the file /SEMCMSInfo.php. The manipulation of the argument searchml leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be...

BarcodeOCR code-related vulnerabilities

BarcodeOCR is a barcode automatic recognition tool developed by the German company BarcodeOCR. Version 19.3.6 of BarcodeOCR contains a code-related vulnerability. This vulnerability stems from the lack of quotation marks around service paths, which may allow local attackers to execute code with...

SolarWinds Web Help Desk code-related vulnerabilities

SolarWinds Web Help Desk is a service desk and asset management software provided by the American company SolarWinds. This software supports centralized knowledge bases, IT asset management, project and task management functions. There is a code vulnerability in SolarWinds Web Help Desk, which...

ForensiT AppX Management Service code-related vulnerabilities

ForensiT AppX Management Service is a system assistance service provided by the British company ForensiT. Version 2.2.0.4 of ForensiT AppX Management Service contains a code vulnerability. This vulnerability arises from the lack of quotation marks around the service path, which may allow local...

Prey code issue vulnerabilities

Prey is a device tracking and security anti-theft tool developed by the American company Prey. Version 1.9.6 of Prey contains a code vulnerability; this vulnerability stems from service paths that are not properly quoted, which may allow code to be executed with elevated privileges...

Motorola Device Manager code-related vulnerabilities

Motorola Device Manager is a computer-based device management tool developed by the American company Motorola. Version 2.5.4 of Motorola Device Manager contains a code vulnerability caused by an unquoted service path, which may allow for the execution of arbitrary code...

Wondershare Driver Install Service code-related vulnerabilities

Wondershare Driver Install Service is an auxiliary background service program from China Wondershare. A code issue vulnerability exists in Wondershare Driver Install Service, which stems from an unquoted service path, and can be exploited by an attacker to cause an elevation of privilege...