CVE-2026-12274 Tutor LMS < 3.9.13 - Instructor+ Arbitrary Post Overwrite via IDOR

The Tutor LMS WordPress plugin before 3.9.13 does not verify that the requesting user is allowed to edit a target post before overwriting it in one of its content-builder save handlers, authorizing the request only against an unrelated identifier, allowing authenticated users with instructor-leve...

PT-2026-1862

Name of the Vulnerable Software and Affected Versions Yonyou YonBIP versions prior to v3 Description The LoginWithV8 interface in the series data application service system is susceptible to a path traversal issue. This allows unauthorized access to sensitive information within the system. The...

CVE-2025-27725

CVE-2025-27725 describes a time-of-check time-of-use race condition in Intel ACAT (Assistive Context-Aware Toolkit) software before version 3.13, impacting Ring 3 user applications. The root cause is a race in the user-space component that can allow a local, authenticated, low-privilege attacker ...

Siemens SINEC Traffic Analyzer security vulnerabilities

Siemens SINEC Traffic Analyzer is a network traffic analysis tool from Siemens Germany. A security vulnerability exists in Siemens SINEC Traffic Analyzer versions prior to V3.0, which stems from insufficient docker container isolation controls and could lead to elevated privileges...

CVE-2024-41941

A vulnerability has been identified in SINEC NMS All versions V3.0. The affected application does not properly enforce authorization checks. This could allow an authenticated attacker to bypass the checks and modify settings in the application without authorization...

CVE-2021-25505

Improper authentication in Samsung Pass prior to 3.0.02.4 allows to use app without authentication when lockscreen is unlocked...

CVE-2018-16561

A vulnerability has been identified in SIMATIC S7-300 CPUs All versions V3.X.16. The affected CPUs improperly validate S7 communication packets which could cause a Denial-of-Service condition of the CPU. The CPU will remain in DEFECT mode until manual restart. Successful exploitation requires an...