CVE-2026-79403: Improper Handling of Insufficient Permissions or Privileges

An issue in Kilo Code before v7.4.1 allows a local attacker to execute arbitrary code via the permission/allow-everything endpoint...

CVE-2026-95386: Loop with Unreachable Exit Condition

TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service...

CVE-2026-95395: Missing Release of Memory after Effective Lifetime

IEEE C37.118 Synchrophasor protocol dissector memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-96418: Loop with Unreachable Exit Condition

TIFF protocol dissector infinite loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-96419: Improper Limitation of a Pathname to a Restricted Directory

Profile import crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service and possible code execution...

CVE-2026-81842: Incorrect Authorization

An authenticated user with edit permission on one folder can move a library panel into another folder where they only have view permission, through the library elements API or the equivalent App Platform resource. The update path did not check library panel create permission on the destination...

CVE-2026-101079

A vulnerability was found in agentverus agentverus-scanner up to 0.8.1. Affected by this vulnerability is the function isSecurityDefenseSkill of the file dist/scanner/analyzers/context.js. Performing a manipulation results in reliance on untrusted inputs in a security decision. The attack must be...

EUVD-2026-88336

A vulnerability was found in agentverus agentverus-scanner up to 0.8.1. Affected by this vulnerability is the function isSecurityDefenseSkill of the file dist/scanner/analyzers/context.js. Performing a manipulation results in reliance on untrusted inputs in a security decision. The attack must be...

CVE-2026-101079

The agentverus agentverus-scanner (up to version 0.8.1 ) contains a vulnerability in the isSecurityDefenseSkill function located in dist/scanner/analyzers/context.js . The root cause is the reliance on untrusted inputs during a security decision. Exploitation requires a local position to initiate...

CVE-2026-101079 agentverus agentverus-scanner context.js isSecurityDefenseSkill reliance on untrusted inputs in a security decision

A vulnerability was found in agentverus agentverus-scanner up to 0.8.1. Affected by this vulnerability is the function isSecurityDefenseSkill of the file dist/scanner/analyzers/context.js. Performing a manipulation results in reliance on untrusted inputs in a security decision. The attack must be...

CVE-2026-101079 agentverus agentverus-scanner context.js isSecurityDefenseSkill reliance on untrusted inputs in a security decision

A vulnerability was found in agentverus agentverus-scanner up to 0.8.1. Affected by this vulnerability is the function isSecurityDefenseSkill of the file dist/scanner/analyzers/context.js. Performing a manipulation results in reliance on untrusted inputs in a security decision. The attack must be...

CVE-2026-101079 agentverus agentverus-scanner context.js isSecurityDefenseSkill reliance on untrusted inputs in a security decision

A vulnerability was found in agentverus agentverus-scanner up to 0.8.1. Affected by this vulnerability is the function isSecurityDefenseSkill of the file dist/scanner/analyzers/context.js. Performing a manipulation results in reliance on untrusted inputs in a security decision. The attack must be...

USN-8827-1: Erlang vulnerabilities

It was discovered that the Erlang Port Mapper Daemon did not properly handle slow connections. A remote attacker could possibly use this issue to cause a denial of service. CVE-2026-42792 It was discovered that Erlang incorrectly handled certain external term format data, leading to heap...

zeroscan

zeroscan Zeroscanは、ドメインコントローラの脆弱性スキャナで、現在Zerologon CVE-2020-1472、MS-PAR/MS-RPRN、SMBv2署名のチェックを含んでいます。 CVE-2020-1472: 組み込みスクリプトを使用してZerologon CVE-2020-1472をチェックしますが、ターゲットの悪用は試みず、単なる脆弱性スキャナです。 コードベースの借用元: https://github.com/SecuraBV/CVE-2020-1472 MS-PAR / MS-RPRN:...

Automated-Next.js-Security-Scanner-for-CVE-2025-29927

Next.js CVE-2025-29927 Vulnerability Scanner A command-line security scanner for identifying publicly accessible Next.js applications that may be exposed to CVE-2025-29927. Disclaimer This tool is intended for authorized security testing, vulnerability assessment, research, and defensive security...

PT-2026-99919

Name of the Vulnerable Software and Affected Versions agentverus agentverus-scanner versions prior to 0.8.2 Description The isSecurityDefenseSkill function within the dist/scanner/analyzers/context.js file relies on untrusted inputs when making security decisions. This issue allows a local attack...

CVE-2026-90926: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEM allows Code Injection. This issue affects Logsign SIEM: from 6.4.101 before 6.4.117...

CVE-2026-15953: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ABB Protection and control IED manager PCM600. This issue affects Protection and control IED manager PCM600: through 2.14...

CVE-2026-101079: Reliance on Untrusted Inputs in a Security Decision

A vulnerability was found in agentverus agentverus-scanner up to 0.8.1. Affected by this vulnerability is the function isSecurityDefenseSkill of the file dist/scanner/analyzers/context.js. Performing a manipulation results in reliance on untrusted inputs in a security decision. The attack must be...

CVE-2026-15952: Incorrect Permission Assignment for Critical Resource

Incorrect Permission Assignment for Critical Resource vulnerability in ABB Protection and control IED manager PCM600. This issue affects Protection and control IED manager PCM600: through 2.14...