CVE-2026-17821

Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. Chromium security severity: Medium...

Statistically Secure Uncloneable Encryption of Arbitrary Messages

Unconditional uncloneable encryption of a single bit with efficient encryption and decryption is now possible. However, whether the extension to messages of arbitrary length achieves statistical security remains to be known. Using the fact that the encoding bases for the single-bit scheme known t...

PT-2026-66398

The RegistrationMagic WordPress plugin before 6.0.9.4 does not properly validate that a one-time password presented in a cookie belongs to the identity being requested before returning front-end form submissions, allowing unauthenticated attackers to read other users' form submission data,...

PT-2026-66534

Name of the Vulnerable Software and Affected Versions IBM Db2 versions 11.5.0 through 11.5.9 IBM Db2 versions 12.1.0 through 12.1.4 Description A buffer overflow exists in the setgid helper db2flacc. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than th...

PT-2026-76044

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-19, an off by one error in the MSL decoder could result in a crash when a malicous MSL file is read. This issue has been fixed in version 7.1.2-19...

PT-2026-66593

Name of the Vulnerable Software and Affected Versions GoAccess versions prior to 1.11 Description The built-in WebSocket server narrows a 64-bit extended frame length into the signed 32-bit WSFrame.payloadlen field before enforcing the maximum frame size. This allows an unauthenticated remote...

PT-2026-76356

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted SVG file can cause a denial of service. An off-by-one boundary check instead of = that allows bypass the guard and reach an undefined size t cast...

CVE-2026-51291

CVE-2026-51291 is reflected in several connected sources as a use-after-free vulnerability in sqlite 3.41. The issue is reported in the jsonCacheInsert function of the JSON cache management module. Details across sources indicate affected product/version and the underlying flaw, but explicit impa...

CVE-2026-51292

CVE-2026-51292 affects SQLite 3.41, describing a use-after-free in the memory buffer processing logic. The vulnerability allows remote attackers to craft input that can lead to arbitrary code execution, information leakage, or denial of service. The available documents identify the affected produ...

CVE-2026-51294

CVE-2026-51294 affects SQLite 3.41, with a use-after-free vulnerability in the jsonArrayLengthFunc function (json.c). The available data specify the vulnerable component and the function but do not provide explicit exploit details, affected subcomponents, versions beyond 3.41, or concrete remedia...

PT-2026-69523

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An off-by-one error exists in the openvswitch module within the queue gso packets and queue userspace packet functions. The issue occurs because OVS ACTION ATTR TRUNC stores a delta from...

EUVD-2025-210553

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /memberProfile.php?id=1...

PT-2026-76082

ImageMagick before 7.1.2-19 contains an off-by-one error in morphology validation allowing out-of-bounds heap buffer reads. Attackers can trigger heap buffer overflow by providing incorrect morphology parameters causing single pixel memory access violations...

CVE-2026-11771: Off-by-one Error

OpenVPN version 2.1.0 through 2.6.20 and 2.7alpha1 through 2.7.4 allows attackers via an off-by-one buffer write in the NTLM proxy authentication to potentially cause a crash via a crafted NTLM response from a malicious proxy server...

CVE-2025-69938

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in renew.php via the parameter membershipType...

PT-2026-66359

Name of the Vulnerable Software and Affected Versions ADM versions 4.1.0 through 4.3.3.RUN1 ADM versions 5.0.0 through 5.1.3.RI81 Description A path traversal issue exists in the Wallpaper component. This occurs because input provided for the wallpaper path is not sufficiently validated before fi...

PT-2026-66633

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The GOOSE parser contains an off-by-one boundary-handling flaw triggered by a single unauthenticated Layer-2 multicast frame on the process bus. When specific...

MiracleLinux 8 : libreswan-4.12-2.el8_10.6 (AXSA:2026-1390:01)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1390:01 advisory. librenswan: IKEv1 Denial of Service via RSA-SHA1 PKCS1 Version 1.5 Encrypted authentication payload CVE-2026-50721 librenswan: IKEv2 Denial of Servi...

CVE-2026-62343 ImageMagick: Heap Buffer Over-Write in morphology operation when an invalid kernel is provided

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 6.9.13-51 and 7.0.1-0 and above prior to 7.1.2-26, an invalid kernel can cause a heap buffer over-write when performing a morphology operation with a user supplied kernel. This issu...

crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

A flaw was found in the crypto/tls package within the Go golang standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock,...