Zhongke Fangde Software Co., Ltd.'s Fangde Desktop Operating System has a local privilege escalation vulnerability (CNVD-C-2026-281769).

Fangde Desktop Operating System is a domestic operating system designed for compatibility with domestic CPUs such as Haiguang, Zhaoxin, Feiteng, Loongson, Shenwei, and Kunpeng. It supports mainstream architectures like x86, ARM, and MIPS. There is a local privilege escalation vulnerability in...

Zhongke Fangde Software Co., Ltd.'s Fangde Desktop Operating System has a local privilege escalation vulnerability (CNVD-C-2026-281778).

Fangde Desktop Operating System is a domestic operating system designed for compatibility with domestic CPUs such as Haiguang, Zhaoxin, Feiteng, Loongson, Shenwei, and Kunpeng. It supports mainstream architectures like x86, ARM, and MIPS. There is a local privilege escalation vulnerability in...

Windows RDP Information Disclosure

The vulnerability of the Remote Desktop Protocol RDP implementation in Windows operating systems is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

CVE-2026-50874

The kanishka-linux Reminiscence software version 0.3.0 is affected by an OS command injection vulnerability within the /manage/features/media component. This flaw occurs because the application fails to properly neutralize special elements used in OS commands, allowing an attacker to execute arbi...

CVE-2026-50871

An OS command injection vulnerability in the media archiving and export pipeline component of kanishka-linux Reminiscence v0.3.0 allows attackers to execute arbitrary commands via supplying a crafted input...

PT-2026-49315

Name of the Vulnerable Software and Affected Versions kanishka-linux Reminiscence version 0.3.0 Description An OS command injection allows attackers to execute arbitrary commands by supplying crafted input to the '/manage/features/media' endpoint. OS command injection is a flaw where an applicati...

Critical Photon OS Security Update - PHSA-2026-5.0-91-0881

Updates of 'httpd', 'ansible' packages of Photon OS have been released...

Winlogon Privilege Escalation

The vulnerability of the Winlogon entry program in Windows operating systems is related to incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows Telephony Service Disclosure

The vulnerability of the Windows operating system’s Telephony Service is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

Secure Boot Bypass

The vulnerability of the Secure Boot protocol for operating systems running Windows is related to a breach in the data protection mechanism. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions...

DWM Core Library Privilege Escalation

The vulnerability of the DWM Core Library in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

DWM Core Library Privilege Escalation

The vulnerability of the DWM Core Library in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Kerberos Protocol DoS

The vulnerability of the Kerberos protocol for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Hyper-V Windows Unauthorized Access

The vulnerability of the Hyper-V component of the Windows operating system is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Secure Boot Bypass

The vulnerability of the Secure Boot protocol for operating systems running Windows is related to a breach in the data protection mechanism. Exploiting this vulnerability could allow an attacker to circumvent security restrictions...

MAL-2026-5762 Malicious code in npm-sandbox-research-e9f0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a18a9932f78294e22aa0a85077b9318233ab0952bc8788ae8987fce3e5002c93 Package declares a postinstall hook "postinstall": "node run.js" that executes automatically on npm install. The tarball ships beacon scripts...

SUSE SLES15 Security Update : hplip (SUSE-SU-2026:2380-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2380-1 advisory. This update for hplip fixes the following issues Update to HPLIP 3.26.4: Security issues: - CVE-2025-43023: weak code signing DSA k...

Malicious code in @achuthvp/postinstall-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3dc0d7b5fc216ae117dda9c492a6bbdff46e49ab53f069c2d525dab001bcdb9 package.json declares scripts.postinstall = node postinstall.js. On every npm install, postinstall.js runs execSync'id' and POSTs a JSON body...

EUVD-2025-210125

Uncontrolled recursion vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Denial-of-Service of the antivirus process. This issue affects Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus on Windows, macOS, and Linux for vir...

Photon OS 5.0: Zlib PHSA-2026-5.0-0874

An update of the zlib package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0874. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...