PT-2026-80959

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the getDetail function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execut...

PT-2026-80941

Multiple DrayTek VigorAP models contain a command injection vulnerability in the setcamset function. The vulnerability is caused by insufficient filtering of the selectSlaves field before command execution. A remote attacker can trigger this vulnerability via crafted input to execute arbitrary...

CVE-2026-19200: Missing Authorization

The Velociraptor verify VQL function allows a user to verify an artifact for syntatic and other issues. Due to an implementation fault in this VQL function, the global artifact repository is used which allows callers to overwrite existing artifacts without the required permissions. The attacker...

PT-2026-80977

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevNet function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execut...

The vulnerability of the sm_name() function in the src/GitPython/git/objects/submodule/util.py file of the Python library for interacting with Git repositories in GitPython, which allows a attacker to compromise the integrity and accessibility of protected information.

The vulnerability of the smname function in the src/GitPython/git/objects/submodule/util.py file of the Python library for interacting with Git repositories in GitPython is related to an incorrect limitation on the path name for the directory. Exploiting this vulnerability could allow a malicious...

The vulnerability of the login() and getFromCookie() functions in the phpMyFAQ web application allows a hacker to disclose sensitive information.

The vulnerability of the login and getFromCookie functions in the phpMyFAQ web application is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by these functions...

The vulnerability of the longestMatch() function in the plugin/transfer/transfer.go file of the CoredNS DNS server allows a hacker to gain unauthorized access to protected information.

The vulnerability of the longestMatch function in the plugin/transfer/transfer.go file of the CoredNS DNS server is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Vulnerability of components in Linux operating system’s kernel tracing mechanism, allowing attackers to cause service interruptions

The vulnerability of components related to Linux operating system kernel tracing is related to the insufficient use of the assert function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Close() function in the Go programming language, which allows a hacker to trigger a service failure

The vulnerability of the Close function in the Go programming language is related to the operation of writing data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

SPIP X-Spip-Filtre Unauthenticated Remote Code Execution

This Metasploit module exploits a PHP function-call injection in SPIPs template engine. The analyseresultatskel function extracts the X-Spip-Filtre: ... patterns from the rendered page body and calls the listed functions as template filters. A newline character is injected into a GET parameter...

PT-2026-80963

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevProto function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to...

PT-2026-81066

A vulnerability has been found in Faveo Helpdesk up to 2.0.3. Affected is the function unlink of the file app/Http/Controllers/Admin/helpdesk/SettingsController.php of the component Logo Handler. Such manipulation of the argument data1 leads to path traversal. The attack can be launched remotely...

PT-2026-80958

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the getVid function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execute...

PT-2026-80976

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the mail mailalert function. The vulnerability is caused by concatenating multiple smtpReceiver email addresses into a fixed-size buffer without checking the remaining buffer size. A remote attacker can trigger this...

EUVD-2026-65145

An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image...

PT-2026-80951

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the pingtrace function. The vulnerability is caused by insufficient validation of the host field before command execution. A remote attacker can trigger this vulnerability via crafted input to execute arbitrary...

PT-2026-80972

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the switch lan gvrp function. The vulnerability is caused by unsafe copying of the portList field into an undersized buffer. A remote attacker can trigger this vulnerability via crafted input, causing a denial of servi...

CVE-2026-52492

An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image...

PT-2026-79814

A vulnerability was identified in rexrainbow phaser3-rex-notes up to 1.80.17. This vulnerability affects the function SetValue of the file plugins/utils/object/SetValue.js of the component BehaviorTree Blackboard Data Interface. Such manipulation of the argument key leads to improperly controlled...

PT-2026-80961

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the rebDevice function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execut...