Timing Attack

Overview Affected versions of this package are vulnerable to Timing Attack through the sample and samplematrix functions in FrodoEngine.java. An attacker can recover information about the sampled noise values by observing how long Frodo key generation or encapsulation takes when it processes...

Timing Attack

Overview Affected versions of this package are vulnerable to Timing Attack through the sample and samplematrix functions in FrodoEngine.java. An attacker can recover information about the sampled noise values by observing how long Frodo key generation or encapsulation takes when it processes...

Important: Red Hat Security Advisory: vim security update

An update for vim is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

CVE-2026-5088

Apache::API::Password versions through 0.5.2 for Perl can generate insecure random values for salts. The makesalt and makesaltbcrypt methods will attept to load Crypt::URandom and then Bytes::Random::Secure to generate random bytes for the salt. If those modules are unavailable, it will simply...

WordPress plugin “Product Pricing Table” by WooBeWoo has security vulnerabilities.

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

CentSDR security vulnerability

CentSDR is a handheld software-defined radio receiver open-sourced by ttfrftech. There is a security vulnerability in CentSDR, which stems from a stack overflow issue in the Thread1 function...

Slah CMS security vulnerability

Slah CMS is a content management system developed by the Brazilian company Slah. Versions of Slah CMS prior to 1.5.0 contain security vulnerabilities. These vulnerabilities stem from defects in the session function located in the config.php file, which may lead to remote code execution...

CVE-2026-5088: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Apache::API::Password versions through 0.5.2 for Perl can generate insecure random values for salts. The makesalt and makesaltbcrypt methods will attept to load Crypt::URandom and then Bytes::Random::Secure to generate random bytes for the salt. If those modules are unavailable, it will simply...

Function Discovery Service Privilege Escalation

The vulnerability of the Function Discovery Service fdwsd.dll on Windows operating systems is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows Ancillary Function Driver Privilege Escalation

The vulnerability of the Windows Ancillary Function Driver for WinSock operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Ancillary Function Driver WinSock Privilege Escalation

The vulnerability of the Ancillary Function Driver for WinSock in Windows operating systems lies in the ability to exploit memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Function Discovery Service Privilege Escalation

The vulnerability of the Function Discovery Service fdwsd.dll on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Remote Desktop Licensing Service Privilege Escalation

The vulnerability of the Remote Desktop Licensing Service for Windows operating systems is related to the lack of authentication for a critical function. Exploiting this vulnerability can allow attackers to increase their privileges...

Windows Ancillary Function Driver WinSock Privilege Escalation

The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

CVE-2024-53412

NietThijmen ShoppingCart version 0.0.2 is vulnerable to a command injection flaw within the connect() function. An attacker can exploit this by injecting malicious payloads into the Port field, leading to the execution of arbitrary shell commands and achieving remote code execution (RCE) . The so...

PT-2026-33068

Name of the Vulnerable Software and Affected Versions CentSDR version e40795 Description A stack overflow occurs in the Thread1 function. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2026-45939

Name of the Vulnerable Software and Affected Versions FRRouting versions stable/10.0 through stable/10.6 Description Missing input validation in the rfapiRibBi2Ri function rfapi rib.c allows attackers to cause a Denial of Service DoS by supplying a crafted BGP UPDATE message. Recommendations At t...

CVE-2024-53412: Improper Neutralization of Special Elements used in a Command

Command injection in the connect function in NietThijmen ShoppingCart 0.0.2 allows an attacker to execute arbitrary shell commands and achieve remote code execution via injection of malicious payloads into the Port field...

Important: vim security update

Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin CVE-2026-28417 vim: Vim: Denial of service and information disclosure via crafted swap file CVE-2026-28421 vim: Vim: Arbitrary code...

CVE-2024-53412

Command injection in the connect function in NietThijmen ShoppingCart 0.0.2 allows an attacker to execute arbitrary shell commands and achieve remote code execution via injection of malicious payloads into the Port field...