TOTOLink A800R Router Code Execution

The vulnerability of the setAppEasyWizardConfig function in the TOTOLink A800R router’s microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...

Mattermost Uncontrolled Resource Consumption DoS

The vulnerability of the Mattermost instant messaging application is related to an uncontrolled resource consumption when processing TIFF files. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Insufficient Verification of Data Authenticity

Overview stigmem-node is a Stigmem reference node — single-host production implementation Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity due to improper validation in the peer-token timestamp process. An attacker can cause valid authentication...

CVE-2026-47745

CVE-2026-47745 affects Shopper: Headless e-commerce Admin Panel. Before 2.8.0, admin tables for PaymentMethods, Currencies and Carriers exposed inline toggles and per-record actions (enable/disable/edit/delete) without per-action permission checks, allowing a low-privilege authenticated user to d...

IBM HTTP Server Code Execution

The vulnerability of the IBM HTTP Server is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service interruptions...

Tenda F451 Router Code Execution

The vulnerability of the fromP2pListFilter function /goform/P2pListFilter in the Tenda F451 router software relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service failures...

Indian Motorcycle Scout Bobber + Tech security vulnerabilities

The Indian Motorcycle Scout Bobber + Tech is a mid-level cruiser motorcycle produced by the Japanese Indian Motorcycle company. The 2025 version of the Indian Motorcycle Scout Bobber + Tech has security vulnerabilities. These vulnerabilities stem from an error in the behavior sequence of the...

ROS-20260529-73-0026

The vulnerability of the JSONSCHEMAVALID function in the MariaDB database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to cause service interruptions and execute arbitrary code by sending a specially crafted JSON file...

ROS-20260529-73-0012

The vulnerability of HashiCorp’s Vault Community Edition and Vault Enterprise, platforms for archiving corporate information, lies in the ability to bypass authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to cause service interruptions...

GitLab Resource Distribution DoS

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

Boa HTTP-server Code Execution

The vulnerability of the Boa HTTP-server microprogrammed routing software from Tenda HG9 involves the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

Tenda F451 Router Code Execution

The vulnerability of the formWrlExtraSet function /goform/WrlExtraSet of the Tenda F451 router software lies in the fact that the operation’s output goes beyond the buffer in memory when processing the GO parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code ...

Boa HTTP Server FormPing Code Execution

The vulnerability of the formPing function on Boa microprogrammed software-based Tenda HG9 routers stems from the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

Security update for xen

This update for xen fixes the following issues CVE-2025-54505: Floating Point Divider State Sampling on AMD CPUs AMD-SN-7053 bsc1262428. CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption bsc1264066. CVE-2026-23557: Xenstored DoS via XSRESETWATCHES command bsc1262178. CVE-2026-23558: grant tabl...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the bpfprogtestrunxdp function in the net/bpf/testrun.c module, which is part of the networking functions in the Linux kernel, relates to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to cause service...

CVE-2026-35676: Weak Password Recovery Mechanism for Forgotten Password

phpMyFAQ before 4.1.3 contains an unauthenticated password reset vulnerability in the user password update API endpoint that allows attackers to change account passwords without token validation. Attackers can enumerate valid username and email pairs and force immediate password changes by sendin...

ANGLE Library DoS

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to external control over a web parameter that is assumed to be immutable. Exploiting this vulnerability could allow an attacker to cause service interruptions...

Linux BPF DoS

The vulnerability in the net/bpf/testrun.c module of the Linux operating system is related to errors during variable initialization. Exploiting this vulnerability can allow an attacker to cause a service failure...

PAN-OS IKEv2 RCE

The vulnerability of the IKEv2 protocol implementation in the PAN-OS operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to enhance their privileges, execute arbitrary code, or cause service failures...

Tenda F1202 Router Code Execution

The vulnerability of the fromPPTPUserSetting function in the Tenda F1202 router’s microprogramming software is related to the issue of the operation going beyond the buffer boundaries in memory when processing the delno parameter. Exploiting this vulnerability allows a remote attacker to execute...