CVE-2026-1333

A Use of Uninitialized Variable vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file...

The vulnerability of Google Chrome’s WebGPU component, which allows a hacker to trigger a service failure.

The vulnerability of Google Chrome’s WebGPU component relates to reading beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially crafted HTML page...

Siemens SIMATIC S7-1500 Use After Free (CVE-2025-39689)

In the Linux kernel, the following vulnerability has been resolved: ftrace: Also allocate and copy hash for reading of filter files Currently the reader of setftracefilter and setftracenotrace just adds the pointer to the global tracer hash to its iterator. Unlike the writer that allocates a copy...

WordPress plugin Element Pack Addons for Elementor 路径遍历漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that extends the...

GHSA-RFQ9-4WCM-64GH ImapEngine affected by command injection via the ID command parameters

Versions of the package directorytree/imapengine before 1.22.3 are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' via the id function in ImapConnection.php due to improperly escaping user input before including it in IMAP ID commands...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from repeated locking during RSS configuration reading, potentially leading to deadlocks...

CVE-2026-26333 Calero VeraSMART < 2022 R1 .NET Remoting Arbitrary File Read Leading to ViewState RCE

Calero VeraSMART versions prior to 2022 R1 expose an unauthenticated .NET Remoting HTTP service on TCP port 8001. The service publishes default ObjectURIs including EndeavorServer.rem and RemoteFileReceiver.rem and permits the use of SOAP and binary formatters with TypeFilterLevel set to Full. An...

Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce

CVE-2024-34102 - CosmicSting XXE Exploit !Python Versionht...

CVE-2026-22892

Mattermost versions 11.1.x = 11.1.2, 10.11.x = 10.11.9, 11.2.x = 11.2.1 fail to validate user permissions when creating Jira issues from Mattermost posts, which allows an authenticated attacker with access to the Jira plugin to read post content and attachments from channels they do not have acce...

bareiron 安全漏洞

Bareiron is a Minecraft game server developed by the P2R3 individual developer. Bareiron has a security vulnerability that stems from excessive reading of memory contents. This vulnerability could allow unverified remote attackers to cause information leakage by sending data packets...

CVE-2025-58467

A relative path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync...

The vulnerability of the irdma_net_event() function in the drivers/infiniband/hw/irdma/utils.c file of the Linux operating system’s kernel driver allows a hacker to cause a service failure.

The vulnerability of the irdmanetevent function in the drivers/infiniband/hw/irdma/utils.c file of the InfiniBand driver for the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

QNAP Systems File Station 路径遍历漏洞

QNAP Systems File Station is an archiving tool under the QTS platform developed by QNAP Systems. This application allows access to NAS files via a web interface. Versions of QNAP Systems File Station prior to 5.5.6.5190 contained a path traversal vulnerability. This vulnerability could lead to th...

Huawei EMUI and Huawei HarmonyOS Communication Module Address Reading Vulnerability

Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is an operating system. Provides a full-scene distributed operating system based on a microkernel. An address reading vulnerability exists in the Huawei EMUI and Huawei HarmonyOS communication module, which can b...

OpenClaw Information Disclosure Vulnerability

OpenClaw is openclaw open source an intelligent artificial assistant. OpenClaw has an information disclosure vulnerability that stems from the isValidMedia function allowing arbitrary file paths, which can be exploited by an attacker to cause the reading of arbitrary files and the disclosure of...

HGiga C&Cm@il SQL注入漏洞

HGiga C&Cm@il is a mail collaboration system developed by China’s HGiga Corporation. HGiga C&Cm@il has a SQL injection vulnerability, which stems from insufficient input validation. This vulnerability could allow unverified remote attackers to inject arbitrary SQL commands to read data from the...

SUSE CVE-2026-24738

gmrtd is a Go library for reading Machine Readable Travel Documents MRTDs. Prior to version 0.17.2, ReadFile accepts TLVs with lengths that can range up to 4GB, which can cause unconstrained resource consumption in both memory and cpu cycles. ReadFile can consume an extended TLV with lengths well...

PT-2026-6697

Name of the Vulnerable Software and Affected Versions affected versions not specified Description An issue exists in the communication module that involves reading memory incorrectly. Successful exploitation of this issue may affect system availability. Recommendations At the moment, there is no...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system developed by Chinese company Huawei. It is a full-scenario distributed operating system based on a microkernel architecture. There is a security vulnerability in Huawei HarmonyOS, which stems from an issue with address reading in the HDC module. This...

Huawei EMUI和Huawei HarmonyOS 安全漏洞

Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is an operating system. Provides a full-scene distributed operating system based on a microkernel. An address reading vulnerability exists in the Huawei EMUI and Huawei HarmonyOS communication module, which can b...