ROS-20260925-73-0193

The vulnerability of the realtekmdioprobe function in the driver/net/dsa/realtek/realtek-mdio.c file of the Linux kernel’s DSA driver is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

CVE-2026-97866: Channel Accessible by Non-Endpoint

A weakness has been identified in Zhonglun CloudPOS 3.0. Affected by this vulnerability is an unknown functionality of the file Program.cs of the component Automatic Update. Executing a manipulation of the argument version/url/packagekey/package name can lead to channel accessible by non-endpoint...

PT-2026-98869

Name of the Vulnerable Software and Affected Versions Zhonglun CloudPOS version 3.0 Description A weakness exists in the Automatic Update component within the Program.cs file. A remote attacker can manipulate the version, url, packagekey, and package name arguments to make a channel accessible to...

Linux Distros Unpatched Vulnerability : CVE-2026-91187

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Verification of Cryptographic Signature vulnerability in dashbit nimblezta allows an unauthenticated remote attacker to authenticate as an arbitrary...

Kibana Connectors SSRF

The vulnerability of the Kibana Connector request execution mechanism of the Kibana visualization service is related to insufficient validation of requests at the server side. Exploiting this vulnerability could allow a malicious actor to execute an SSRF attack remotely...

Perl-Crypt-DSA Data Compromise

The vulnerability of the Perl-Crypt-DSA digital signature package relates to the surface area of the attack, whose quantitative measure exceeds the desired maximum. Exploiting this vulnerability allows an attacker operating remotely to compromise the confidentiality of the protected information...

BuildKit DoS

The vulnerability of the BuildKit container-building software lies in insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to cause service failures...

Kibana Cloud Connect Data Compromise

The vulnerability of the Cloud Connect component of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the...

Perl-DBI Code Execution

The vulnerability of the Perl-DBI interface for connecting to and working with databases involves the use of externally controlled input data for class selection. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

dogtag-pki Authentication Bypass

The vulnerability of the PKI infrastructure creation and management system, as well as the lifecycle of digital certificates in dogtag-pki, is related to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to...

golang-x-net Uncontrolled Resource Consumption DoS

The vulnerability of the golang-x-net package in the Golang programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

etcd gRPC Authorization Bypass

The vulnerability in the gRPC authorization mechanism of the Etcd configuration store relates to flaws in the authorization process. Exploitation of this vulnerability could allow a remote attacker to bypass security restrictions...

Fleet Plugin Unauthorized Access

The vulnerability of the Fleet plugin of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Kibana Dashboard Bypass Security

The vulnerability of the dashboard management mechanism of the Kibana data visualization service is related to incorrect restrictions on the path name to the restricted catalog. Exploiting this vulnerability could allow an attacker to bypass security restrictions remotely...

Netty Insufficient Randomness Unauthorized Access

The vulnerability of the framework used for developing network applications, servers, and client protocols based on Netty lies in the use of insufficiently random values. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

Python-daphne HTTP Request Smuggling

The vulnerability of the asynchronous Python-daphne web server is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to send hidden HTTP requests remotely a type of HTTP request smuggling attack...

Gitea Authentication Bypass Info Disclosure

The vulnerability of the Git repository management system Gitea is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Kibana Reporting Unauthorized Access

The vulnerability of the Reporting component of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Vim Code Execution

The vulnerability of the Vim text editor is related to the use of an incomplete black list. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

GitPython Data Protection Unauthorized Access

The vulnerability in the Python library for interacting with Git repositories, GitPython, is related to insufficient protection of sensitive data. Exploitation of this vulnerability may allow a remote attacker to gain unauthorized access to protected information...