CVE-2026-13248

The Honeywell PD45 Industrial Printer (firmware version F10.19.010040 ) contains an Authenticated Remote Code Execution vulnerability within the web management interface. The root cause allows an authenticated user with admin or itadmin account privileges to submit commands written in the Interme...

EUVD-2026-86385

An Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command Interface vulnerability in the web management interface in Honeywell PD45 Industrial Printer version...

CVE-2026-13248: External Control of File Name or Path

An Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command Interface vulnerability in the web management interface in Honeywell PD45 Industrial Printer version...

PT-2026-98236

Name of the Vulnerable Software and Affected Versions Honeywell PD45 Industrial Printer versions prior to F10.22.030745 Description An authenticated remote code execution issue exists in the web management interface due to an arbitrary file write in the Intermec Fingerprint Command Interface. An...

Malicious code in @ks-cqc/fingerprint-generator (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16523 Malicious code in @ks-cqc/fingerprint-generator (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2026-63406: Cleartext Storage of Sensitive Information

AnyCable is a realtime server for reliable two-way communication that supports any backend. Prior to 1.6.15, the telemetry subsystem in telemetry/config.go enables tracking with a hardcoded public authToken, while clusterFingerprint in telemetry/telemetry.go reads the full configuration file and...

CVE-2026-55323

In gfbaseupdatefingerbase of gfbase.c, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-84625

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27, watchOS 27. An app may be able to fingerprint the user...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: nfnetlinkosf: Validated the lengths of individual options in fingerprints. nfnlosfaddcallback validates the bounds of optnum and the NUL-termination of strings. However, it does not check the lengths of individual options. A...

Astra Linux – Vulnerability in WebKit2GTK

A problem related to injections has been addressed through improved validation. This issue is fixed in Safari 17.4, iOS 17.4, iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, and watchOS 10.4. A maliciously crafted webpage may potentially exploit this vulnerability...

Astra Linux – Vulnerability in mc

A issue was discovered in Midnight Commander through version 4.8.26. When establishing an SFTP connection, the fingerprint of the server is neither checked nor displayed. As a result, a user can connect to the server without being able to verify its authenticity...

elib (>=0.1.55, <=0.1.57), emiz (>=0.1.35, <=2018.4.2.1) +11 more potentially affected by CVE-2026-76219 via gitpython (2.1.8)

gitpython PYPI version 2.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - elib =0.1.55, =0.1.35, =0.2.4a149, =0.0.1, =1.0.0, =0.4233.0, =0.2354.0, =0.2354.0, =0.1.7, =0.2.120, =1.0.0, =0.1.0, =2.1.1 Source cves:...

elib (>=0.1.55, <=0.1.57), emiz (>=0.1.35, <=2018.4.2.1) +11 more potentially affected by CVE-2026-78675 via gitpython (2.1.8)

gitpython PYPI version 2.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - elib =0.1.55, =0.1.35, =0.2.4a149, =0.0.1, =1.0.0, =0.4233.0, =0.2354.0, =0.2354.0, =0.1.7, =0.2.120, =1.0.0, =0.1.0, =2.1.1 Source cves:...

Malicious code in plogme (npm)

plogme is a renamed fork of the Baileys WhatsApp Web library from the same publisher-controlled family as @crysnovax/baileys MAL-2026-15917, and versions 1.0.0 through 1.0.3 carry the same forced-follow and fingerprint modules. lib/Utils/channel-policy.js javascript-obfuscator output, identical t...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gstreamer1-plugins-bad-free (UTSA-2026-106211)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106211 advisory. A logic vulnerability was found in GStreamer's webrtcbin component. The checksdpcrypto function contains an inverted boolean condition that causes it to accept remot...

Malicious code in @crysnovax/baileys (npm)

@crysnovax/baileys is a renamed fork of the Baileys WhatsApp Web library. On every successful connection connection.update with connection === 'open', wired in lib/Socket/socket.js it silently makes the user's own authenticated WhatsApp account follow two channels controlled by the publisher,...

fingerprint-pro-internals — Updated!

Fingerprint Pro v4, deobfuscated and documented 143 signals named. The bundle unpacked. The wire format decoded. Run it on your browser · Read the docs · Signal map · Collector sources | ---|--- 143 signals, one row each| surfaces touched, status codes, constants compared, value shape The agent,...

fingerprint-pro-internals

Fingerprint Pro v4, deobfuscated and documented 143 signals named. The bundle unpacked. The wire format decoded. Run it on your browser · Read the docs · Signal map · Collector sources...

MariaDB has cleartext password disclosure to a MITM on the initial-handshake

Summary When a Java application connects with sslMode=verify-full or verify-ca and a password but does not pin a server certificate, Connector/J deliberately accepts an untrusted/self-signed certificate at the TLS layer the "MITM-proof without a CA" feature and proves the server's identity...