41212 matches found
PT-2026-59633
Impact An attacker who uses this vulnerability can craft a PDF which leads to the RAM being exhausted. This requires accessing a stream compressed using /FlateDecode with a /Predictor unequal 1 and large predictor parameters. Patches This has been fixed in pypdf==6.10.2. Workarounds If you cannot...
PT-2026-83014
Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description An issue exists in the ipvs module where synced connections may incorrectly inherit the IP VS CONN F ONE PACKET flag during the ip vs bind dest function execution. This occurs when a...
PT-2026-59870
Impact When SetSize receives an input set shape that is not a 1D tensor, it gives a CHECK fails that can be used to trigger a denial of service attack. python import tensorflow as tf arg 0=1 arg 1=1,1 arg 2=1 arg 3=True arg 4='' tf.raw ops.SetSizeset indices=arg 0, set values=arg 1, set shape=arg...
PT-2026-59654
Impact An attacker can cause the creation of unnecessary background threads in the python-engineio server by exploiting the heartbeat mechanism, which launches a thread when a new connection is received, and when the client sends a PONG packet. Note: this issue primarily affects synchronous...
PT-2026-59829
Impact If RaggedTensorToVariant is given a rt nested splits list that contains tensors of ranks other than one, it results in a CHECK fail that can be used to trigger a denial of service attack. python import tensorflow as tf batched input = True rt nested splits = tf.constant0,32,64, shape=3,...
PT-2026-59725
Impact When SparseSparseMaximum is given invalid sparse tensors as inputs, it can give an NPE. python import tensorflow as tf tf.raw ops.SparseSparseMaximum a indices=1, a values = 0.1 , a shape = 2, b indices=, b values =2 , b shape = 2, Patches We have patched the issue in GitHub commit...
PT-2026-59992
Impact When SetSize receives an input set shape that is not a 1D tensor, it gives a CHECK fails that can be used to trigger a denial of service attack. python import tensorflow as tf arg 0=1 arg 1=1,1 arg 2=1 arg 3=True arg 4='' tf.raw ops.SetSizeset indices=arg 0, set values=arg 1, set shape=arg...
PT-2026-59847
Impact When the parameter summarize of tf.raw ops.Print is zero, the new method SummarizeArray will reference to a nullptr, leading to a seg fault. python import tensorflow as tf tf.raw ops.Printinput = tf.constant1, 1, 1, 1,dtype=tf.int32, data = False, False, False, False, False, False, False,...
PT-2026-59945
Impact array ops.upper bound causes a segfault when not given a rank 2 tensor. Patches We have patched the issue in GitHub commit 915884fdf5df34aaedd00fc6ace33a2cfdefa586. The fix will be included in TensorFlow 2.13. We will also cherrypick this commit in TensorFlow 2.12.1. For more information...
PT-2026-59931
Impact version:2.11.0 //core/ops/audio ops.cc:70 Status SpectrogramShapeFnInferenceContext c ShapeHandle input; TF RETURN IF ERRORc-WithRankc-input0, 2, &input; int32 t window size; TF RETURN IF ERRORc-GetAttr"window size", &window size; int32 t stride; TF RETURN IF ERRORc-GetAttr"stride", &strid...
PT-2026-59643
Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires cross-reference streams with wrong large /Size values or object streams with wrong large /N values. Patches This has been fixed in pypdf==6.10.1. Workarounds If you cannot upgrade yet,...
CVE-2026-15494
AMTT Hotel Broadband Operation System 1.0 contains a SQL injection flaw in an unknown function of file manager/network/switch_status.php. Manipulating the argument ID remotely can lead to SQL injection. An exploit has been published and may be used; vendor contact occurred with no response. Docum...
Cube-TempRoot
Cube LD800 temporary root shell This tool is specific to the...
wordpress-ocr-internal-pentest
─── Internal Web Application & OCR Service ─── 🛡️ A...
OPENSUSE-SU-2026:11260-1 patch-2.8-3.1 on GA media
These are all security issues fixed in the patch-2.8-3.1 package on the GA media of openSUSE Tumbleweed...
Fedora 44 : chromium (2026-7e82bf89f4)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7e82bf89f4 advisory. Update to 150.0.7871.114 CVE-2026-15112: Use after free in Ozone CVE-2026-15129: Use after free in Views CVE-2026-15132: Uninitialized Use in V8...
CVE-2026-57828
The CVE-2026-57828 entry concerns the Joomla extension Phoca Downloads (Phoca.cz) with an authenticated arbitrary file upload vulnerability in the RSFiles component prior to 6.1.3. The issue allows registered users to upload executable files, enabling full remote code execution (RCE). The provide...
CVE-2026-11901
Affected software: WordPress WP Hotel Booking plugin (versions ≤ 2.3.1). Vulnerability: Insufficient Verification of Data Authenticity in the PayPal IPN handler (web_hook_process_paypal_standard). The IPN validation endpoint can be chosen from attacker-controlled test_ipn, permitting force-upgrad...
CVE-2026-13353 WP Ultimate CSV Importer <= 8.0.1 - Missing Authorization to Authenticated (Subscriber+) Remote Code Execution via 'MappedFields' Parameter
The WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.0.1 via the 'MappedFields' parameter. This is due to missing capability checks on the AJAX handlers for installaddon,...
