PT-2026-48043

Name of the Vulnerable Software and Affected Versions Windows Boot Manager affected versions not specified Description A protection mechanism failure in Windows Boot Manager allows an authorized attacker to bypass a security feature locally. Recommendations At the moment, there is no information...

fastapiadmin 跨站脚本漏洞

FastApiAdmin is a full-stack rapid development platform based on FastAPI, developed by the individual developer fastapiadmin. Version 2.2.0 of FastapiAdmin contains a cross-site scripting vulnerability. This vulnerability stems from the AI assistant chat feature, which has a cross-site scripting...

PT-2026-47946

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A protection mechanism failure in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally. Recommendations At the moment, there is no...

APSB26-56 : Security update available for Adobe Experience Manager

Adobe has released updates for Adobe Experience Manager AEM. This update resolves vulnerabilities rated important and moderate. Successful exploitation of these vulnerabilities could result in arbitrary code execution and security feature bypass...

Microsoft Windows Secure Boot 处理逻辑错误漏洞

Microsoft Windows Secure Boot is a security boot mechanism provided by the American company Microsoft. There are security vulnerabilities associated with Microsoft Windows Secure Boot. Attackers can exploit these vulnerabilities to bypass certain features. The following products and versions are...

APSB26-64 : Security update available for Adobe ColdFusion

Adobe has released security updates for ColdFusion versions 2025 and 2023. These updates resolves critical and important vulnerabilities that could lead to arbitrary code execution, privilege escalation, arbitrary file system read, and security feature bypass...

PT-2026-48093

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write...

PT-2026-47984

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A failure in the Mark of the Web MOTW protection mechanism allows an unauthorized attacker to bypass a security feature over a network, which can affect the system. Recommendations At the...

PT-2026-47979

Name of the Vulnerable Software and Affected Versions Windows Secure Boot affected versions not specified Description A protection mechanism failure in Windows Secure Boot allows an authorized attacker to locally bypass a security feature. Recommendations At the moment, there is no information...

PT-2026-47877

Improper access control in Windows Administrator Protection allows an authorized attacker to bypass a security feature locally...

PT-2026-48106

Name of the Vulnerable Software and Affected Versions Visual Studio Code affected versions not specified Description Improper input validation allows an unauthorized attacker to bypass a security feature locally. Recommendations At the moment, there is no information about a newer version that...

PT-2026-48016

Name of the Vulnerable Software and Affected Versions Windows BitLocker affected versions not specified Description A protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature through a physical attack, which can subsequently affect the system...

Security Bulletin: IBM WebSphere Application Server and IBM WebSphere Application Server Liberty, which are bundled with IBM Enterprise Application Runtimes, are affected by a denial of service vulnerability (CVE-2026-4410)

Summary IBM WebSphere Application Server and IBM WebSphere Application Server Liberty, which are bundled with IBM Enterprise Application Runtimes, are affected by a denial of service vulnerability with the sipServlet-1.1 feature enabled. Vulnerability Details Refer to the security bulletins liste...

CVE-2026-11522

CVE-2026-11522 describes a stack-based buffer overflow in the Tenda W20E firmware version 15.11.0.6, specifically in the formSetPortMirror function exposed via /goform/setPortMirror. By manipulating the portMirrorMirroredPorts argument, an attacker can trigger the overflow remotely. This vulnerab...

The vulnerability of the Briefcase feature in the Zimbra Collaboration Suite email management system allows attackers to perform cross-site scripting attacks.

The vulnerability of the Briefcase feature in the Zimbra Collaboration Suite email management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

SUSE CVE-2026-11148

Inappropriate implementation in Payments in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

NCMD: Benign-Anchored Feature Selection for Imbalanced Network Intrusion Detection

Feature selection is critical for network intrusion detection systems NIDS operating under high-dimensional, highly imbalanced traffic, as found in operational and defense networks. Traditional filter methods rank features using global statistics computed symmetrically across classes and thus fai...

zoneminder-rce-poc

just wait and see Proof of concept for an OS command injectio...

CVE-2026-9016

The Debug Log Manager – Conveniently Monitor and Inspect Errors plugin for WordPress is vulnerable to Improper Output Neutralization for Logs in all versions up to, and including, 2.5.0. This is due to the logjserrors AJAX handler being registered for unauthenticated users via...

EulerOS Virtualization 2.12.1 : kernel (EulerOS-SA-2026-2077)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : netfilter: ctnetlink: remove refcounting in expectation dumpersCVE-2025-39764 nvme: nvme-fc: Ensure -ioerrwork is cancelled in...