45096 matches found
SUSE CVE-2026-9499
An out-of-bounds read buffer over-read vulnerability exists in QTextCodec::codecForName in Qt. When the function is called with a QByteArray that is not NUL-terminated for example, one created with QByteArray::fromRawData, the codec-name matching routine reads past the end of the supplied buffer...
Exploring Privacy Leakage and Data Disclosure Violations in the MacOS Application Ecosystem
The systematic and excessive data collection practices of tech companies have rendered online privacy both a necessity and a sought-after commodity. However, while the privacy risks of the web, mobile, and IoT ecosystems have been extensively examined, desktop environments have been largely...
📄 ICS-Park Smart Park Management System 2.0 Privilege Escalation
A proof of concept exploit for a privilege escalation vulnerability in ICS-Park Smart Park Management System version 2.0. Missing authorization checks allow an authenticated low-privileged user to create a role containing arbitrary permissions, assign that role to their own account, and create ne...
CVE-2026-14304: Improper Restriction of XML External Entity Reference
In Eclipse Accessibility Tools Framework ACTF versions up to 1.6.0 including source code versions up to v20260630 and ACTF based application miChecker versions up to 3.1.0, it has been identified that an XML External Entity XXE vulnerability exists. If this vulnerability is exploited, a malicious...
PT-2026-68092
Name of the Vulnerable Software and Affected Versions Eclipse Accessibility Tools Framework ACTF versions prior to 1.6.1 miChecker versions prior to 3.1.1 Description An XML External Entity XXE vulnerability exists, which occurs when an application processes XML input containing a reference to an...
Cross-site Scripting (XSS)
Overview Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the displayforfield function. An attacker can execute arbitrary JavaScript code in the context of th...
Exploit for Interpretation Conflict in Wordpress
wp2exp2026 🔥 WordPress All-in-One Exploit Framework — De...
CVE-2026-25292
Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration...
CVE-2026-15337
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2026-15337
An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.utils.translation.checkforlanguage is subject to a potential denial-of-service attack when given many distinct, very long language codes, which are retained as keys in an in-memory cache and consume process memory...
EUVD-2026-52738
Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration...
CVE-2026-25292
The CVE-2026-25292 issue is a memory corruption vulnerability in the fastboot command handler used for audio framework configuration in Automotive Linux OS. The root cause, as described, is processing untrusted user input, leading to memory corruption with high impact on confidentiality, integrit...
CVE-2026-25292 Improper Validation of Syntactic Correctness of Input in Automotive Linux OS
Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration...
CLSA-2026-1785814744 TuxCare security update for org.springframework (9 CVEs)
TuxCare rebuilt 22 org.springframework packages to address 9 CVEs. Fixed in 5.0.5.RELEASE-tuxcare.2...
CLSA-2026-1785380498 TuxCare security update for org.springframework (6 CVEs)
TuxCare rebuilt 21 org.springframework packages to address 6 CVEs. Fixed in 4.3.9.RELEASE-tuxcare.2...
CLSA-2026-1785380807 TuxCare security update for laravel/framework (1 CVE)
TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 8.12.0-p4+tuxcare...
CLSA-2026-1785380233 TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 21 org.springframework packages to address 2 CVEs. Fixed in 4.3.25.RELEASE-tuxcare.1...
CLSA-2026-1784769525 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 21 org.springframework packages to address 1 CVE. Fixed in 4.2.9.RELEASE-tuxcare.7...