CVE-2026-103097: Use of Hard-coded Credentials

An API key is hardcoded and retrievable from the application package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to extract and misuse the key...

CVE-2026-103096: Use of Hard-coded Credentials

API key is hardcoded and retrievable from the application package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to extract and misuse the key...

CVE-2026-97363: Improper Restriction of Excessive Authentication Attempts

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks or brute-force attacks to gain unauthorized access...

CVE-2026-104861: Uncontrolled Resource Consumption

probe-image-size gets image dimensions without downloading the entire file. Prior to 7.4.0, lib/parsesync/svg.js and lib/parsestream/svg.js use the searching regular expression //, which repeatedly scans to the end of input when attacker-controlled data contains many less-than characters without ...

advanced-port-scanner

Advanced Port Scanner — Live CVE + SearchSploit Edition A Pyt...

trivy v0.75.0

📖 Documentation Trivy pronunciation is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues. Targets what Trivy can scan: Container Image Filesystem Git Repository remote Virtual Machine Image Kubernetes...

INtrack

INtrack - 인터넷 크롤러 및 보안 스캐너 INtrack은 네트워크 정찰, 취약점 탐지, 보안 평가를 위해 설계된 강력한 멀티스레드 보안 스캐너이자 인터넷 크롤러입니다. 다양한 인스턴스, 취약점, IoT 기기, 노출 항목 등을 스캔할 수 있습니다. 기능 🔍 포괄적 스캔 : 웹 서버, 애플리케이션, 취약한 서비스 등을 탐지 🌐 유연한 대상 선택 : 단일 호스트, 서브넷, 무작위 인터넷 IP 또는 파일의 대상 스캔 🛠️ 다양한 스캐너 유형 : 알려진 CVE에 대한 취약점 스캐너 인스턴스 탐지 WordPress, Jira,...

CLEANSTART-2024-LB76268 Insufficient data validation in QR scanner in Google Chrome on iOS prior to 90

Security vulnerability affects the chromium package. Insufficient data validation in QR scanner in Google Chrome on iOS prior to 90...

CamTRON

CamTRON - Escáner de Cámaras Una herramienta automatizada para detectar dispositivos de vigilancia cámaras en redes. Características Detección multimarca : Compatible con más de 30 marcas de cámaras, incluyendo Hikvision, Dahua, Axis, CCTV y más Escaneo de alto rendimiento : Escaneo concurrente c...

CVE-2026-82826: Cleartext Transmission of Sensitive Information

Hitachi Coding Software Suite contains a vulnerability related to the Cleartext Transmission of Sensitive Information which allows an attacker to eavesdrop on with authentication credentials and sensitive data in transit. This issue affects Hitachi Coding Software Suite: through 3.3.0...

CVE-2026-103495: Missing Authorization

In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogs...

CVE-2026-7176: Improper Neutralization of Input During Web Page Generation

CVE-2026-7176: the Help text and Title parameters in the endpoint /events/ - /customform/edit during the process of creating or modifying forms associated with ticket sales for an event, which allows for the injection of JavaScript that will execute on the public ticket purchase page for the even...

CVE-2026-103497: Server-Side Request Forgery (SSRF)

In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration...

CVE-2026-103490: Missing Authorization

In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group links...

CVE-2026-97277: Missing Authorization

Subscriber Broken Access Control in Social Boost = 3.6.2 versions...

CVE-2026-103492: Loop with Unreachable Exit Condition

In JetBrains YouTrack before 2026.2.19422 doS attack was possible via crafted PSD attachments...

CVE-2026-14316: Heap-based Buffer Overflow

The revoked-key error path builds a human-readable failure reason using sprintf into a heap buffer. The allocated buffer is too small for the final formatted message. When sprintf writes the full message, it can write past the end of the heap allocation...

CVE-2026-71454: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in CWE-79 - Cross-site Scripting CAPEC-63 allows Cross-Site Scripting XSS. This issue affects CAPEC-63: before 3.0b63...

Multiple vulnerabilities in Image Scanner Driver for Linux

Overview Image Scanner Driver for Linux provided by PFU Limited contains multiple vulnerabilities listed below: OS Command Injection CWE-78 - CVE-2026-78229 Link Following CWE-59 - CVE-2026-81310 Nir Yehoshua of Cipher Security Labs reported these vulnerabilities to PFU Limited and coordinated...

CVE-2026-78229

Image Scanner Driver for Linux contains an OS command injection vulnerability. An attacker who can log in to a Linux system where the affected product is installed may execute an arbitrary OS command by making certain preparations...