232429 matches found
PT-2026-70511
Name of the Vulnerable Software and Affected Versions Windows Projected File System affected versions not specified Description An integer overflow or wraparound occurs in the Windows Projected File System, which allows an authorized attacker to elevate privileges locally. Recommendations At the...
PT-2026-70509
Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A use-after-free condition in the Windows Kernel allows an authorized attacker to elevate privileges locally, enabling them to affect the system. Use-after-free is a memory corruption...
PT-2026-70676
Name of the Vulnerable Software and Affected Versions Windows Autopilot affected versions not specified Description A use-after-free condition in Windows Autopilot enables an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an...
PT-2026-70474
Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description A use-after-free condition in Windows Win32K allows an authorized attacker to elevate privileges locally. A use-after-free is a memory corruption issue that occurs when an application...
PT-2026-70942
Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.7.2 Description A heap-based buffer overflow exists in the Diameter S6a Interface component within the mme s6a subscription data from avp function of the src/mme/mme-fd-path.c file. This issue can be triggered...
PT-2026-70571
Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description An out-of-bounds write occurs in .NET, which could allow an unauthorized attacker to execute code locally. An out-of-bounds write is a memory corruption error that happens when a program writes...
Linux Distros Unpatched Vulnerability : CVE-2026-72694
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacker can exploit a...
Fedora 43 : mingw-gstreamer1-plugins-good (2026-1e22d3b0bf)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-1e22d3b0bf advisory. Backport fix for CVE-2026-5056. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
CVE-2026-15467 Trustyai-service-operator: trustyai-service-operator: lmevaljob sidecar containers bypass protected environment variable filtering, allowing trust_remote_code policy override
A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can exploit this vulnerability by configuring a sidecar container to bypass existing security policies. This allows the user to enable and execute untrusted remote code, leading to...
EUVD-2026-55809
A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can exploit this vulnerability by configuring a sidecar container to bypass existing security policies. This allows the user to enable and execute untrusted remote code, leading to...
Exploit for Code Injection in Pgadmin Pgadmin_4
No d...
Exploit for Code Injection in Pgadmin Pgadmin_4
No d...
CVE-2026-72863
creationtimestamp| type| source ---|---|--- 2026-08-10 19:28:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msqthb3xrx2q...
CVE-2026-72882
Dokploy: CVE-2026-72882 affects Dokploy 0.28.8 and earlier. An authenticated user who can create or update file mounts can inject shell metacharacters into filePath, causing Dokploy to execute attacker-controlled commands on the configured remote managed server over SSH. In the default deployment...
CVE-2025-13294
Affected software: TBEA TLogger web server (firmware version V2.1.0.0B0.0.0.0). Vulnerability: Unauthenticated SQL injection in multiple HTTP endpoints that incorporate attacker-controlled parameters directly into SQLite queries. Impact: attacker can read, modify, or delete data in CCU.db; high c...
CVE-2025-13293
A hard-coded or default root account credential in TBEA TLogger V2.1.0.0B0.0.0.0 allows an unauthenticated remote attacker to obtain root-level access to the device via the exposed SSH service. The root password can be recovered from the password hash stored in /etc/shadow and used to authenticat...
CVE-2026-72880 Dokploy: Arbitrary File Write + Remote OS Command Injection via `certificatePath`
Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, the apiCreateCertificate schema in packages/server/src/db/schema/certificate.ts accepts a client-supplied certificatePath, and packages/server/src/services/certificate.ts joins that value to the certificate root withou...
CVE-2021-34512
creationtimestamp| type| source ---|---|--- 2026-08-10 19:06:27+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3msqsald3t72x...
CVE-2026-72870
Dokploy's buildRemoteDocker vulnerability affects Dokploy before 0.29.13. The buildRemoteDocker() function interpolates the application-controlled dockerImage value directly into a docker pull command, enabling an authenticated user with project access to craft a dockerImage via application.updat...