PT-2026-7700

NetworkSleuth 3.0.0.0 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized registration key. Attackers can generate a 1000-character buffer payload and paste it into the registration key field to trigger an application crash...

PT-2026-7704

Name of the Vulnerable Software and Affected Versions ShareAlarmPro affected versions not specified Description A denial of service issue exists where attackers can crash the application by providing an oversized registration key. This is achieved by pasting a 1000-character buffer payload into t...

PT-2026-7697

Name of the Vulnerable Software and Affected Versions NBMonitor version 1.6.6.0 Description A denial of service issue exists in the registration key input. An attacker can cause the application to crash by pasting a 1000-character buffer payload into the Key field. Recommendations At the moment,...

PT-2026-7705

Name of the Vulnerable Software and Affected Versions SpotDialup version 1.6.7 Description A denial of service issue exists in the registration key input field. An attacker can cause the application to crash by pasting a 1000-character buffer payload into the Key field. Recommendations At the...

PT-2026-7708

Name of the Vulnerable Software and Affected Versions SpotIE version 2.9.5 Description A denial of service issue exists in the registration key input. An attacker can cause the application to crash by pasting a 1000-character buffer payload into the Key field. Recommendations At the moment, there...

PT-2026-7724

Dify is an open-source LLM app development platform. Prior to 1.13.0, a cross site scripting vulnerability has been found in the web application chat frontend when using echarts. User or llm inputs containing echarts containing a specific javascript payload will be executed. This vulnerability is...

IBM Concert Cross-Site Scripting Vulnerability (CNVD-2026-13788)

IBM Concert is a new tool from International Business Machines IBM Inc. that uses generative AI to help manage complex cloud-native applications. IBM Concert suffers from a cross-site scripting vulnerability that stems from improper input validation of the HOST header, which can be exploited by a...

PT-2026-7687

TaskCanvas 1.4.0 contains a denial of service vulnerability in the registration code input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the registration field to trigger an application crash...

PT-2026-7698

Name of the Vulnerable Software and Affected Versions NetShareWatcher version 1.5.8.0 Description A buffer overflow occurs in the registration key input. An attacker can cause the application to crash by providing oversized input, such as a 1000-character payload, into the registration key field...

CVE-2025-69873

ajv Another JSON Schema Validator before 8.18.0 is vulnerable to Regular Expression Denial of Service ReDoS when the $data option is enabled. The pattern keyword accepts runtime data via JSON Pointer syntax $data reference, which is passed directly to the JavaScript RegExp constructor without...

PT-2026-7696

Duplicate Cleaner Pro 4.1.3 contains a denial of service vulnerability that allows attackers to crash the application by injecting an oversized buffer into the license key field. Attackers can generate a 6000-byte payload and paste it into the license activation field to trigger an application...

PT-2026-7507

An attacker with access to the web application ZeusWeb of the provider Microcom in this case, registration is required who has the vulnerable software could introduce arbitrary JavaScript by injecting an XSS payload into the ‘Name’ and “Surname” parameters within the ‘My Account’ section at the...

PT-2026-7694

Name of the Vulnerable Software and Affected Versions Dnss Domain Name Search Software affected versions not specified Description The software is susceptible to a denial of service condition. An attacker can crash the application by supplying an excessively large registration key. Specifically, ...

PT-2026-7709

Name of the Vulnerable Software and Affected Versions SpotIM version 2.2 Description A denial of service issue allows attackers to crash the application by inputting a large buffer into the registration name field. This is achieved by providing a 1000-character payload in the Name field...

PT-2026-7332

Name of the Vulnerable Software and Affected Versions .NET versions 8.0.0 through 8.0.22 .NET versions 9.0.0 through 9.0.12 .NET versions 10.0.0 through 10.0.2 Description The software contains a security feature bypass issue due to improper handling of missing special elements. An attacker could...

CVE-2026-1529

A flaw was found in Keycloak. An attacker can exploit this vulnerability by modifying the organization ID and target email within a legitimate invitation token's JSON Web Token JWT payload. This lack of cryptographic signature verification allows the attacker to successfully self-register into an...

📄 Online Admission Software 2.6 SQL Injection

Online Admission Software version 2.6 suffers from a remote SQL injection vulnerability. ============================================================================================================================================= | Title : Online Admission Software 2.6 SQL injection Vulnerabilit...

📄 Novell GroupWise 2012 Traversal / Shell Upload

This code exploits the directory traversal vulnerability in Novell GroupWise 2012 before Support Pack 1 to steal files, and attempts to upload a web shell payload if possible, making it an effective penetration testing tool...

CVE-2026-25574

Payload is a free and open source headless content management system. Prior to 3.74.0, a cross-collection Insecure Direct Object Reference IDOR vulnerability exists in the payload-preferences internal collection. In multi-auth collection environments using Postgres or SQLite with default...

PT-2026-6965

Name of the Vulnerable Software and Affected Versions OpenCode affected versions not specified Description The software contains a remote code execution RCE issue. The RCE is triggered through command injection within JSON data sent to the AI agent. This allows for the execution of arbitrary...