CVE-2026-10590: Undefined Security Weakness

A potential missing authentication vulnerability could allow a local privileged attacker to use WMI commands to arbitrarily trigger a System Management Interrupt handler...

CVE-2026-10587: Out-of-bounds Write

A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management settings in System Management Mode...

CVE-2023-49900: Improper Neutralization of Special Elements used in an OS Command

An unauthenticated remote attacker is able to perform remote code execution due to incorrectly sanitized user input in the SetParameter command...

CVE-2023-49899: Origin Validation Error

An unauthenticated remote attacker can execute any command on the affected device due to not correctly verifying the origin of a communication channel...

CVE-2026-6423: Improper Privilege Management

A local privilege escalation vulnerability in ESET Inspect Connector. The vulnerability was caused by improper authentication in an IPC channel...

CVE-2026-12395: Improper Neutralization of Special Elements used in an SQL Command

The WP Job Portal WordPress plugin before 2.5.5 does not properly sanitize and escape a parameter before using it in a SQL query, allowing authenticated users with a subscriber-level self-registerable account to perform SQL injection attacks...

CVE-2026-10588: Exposure of Sensitive System Information to an Unauthorized Control Sphere

A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory...

CVE-2026-57077: Out-of-bounds Read

YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newlinelen. In the bundled libsyck newlinelen and isnewline dereference the scan pointer, and the following byte for a "\r\n" pair, with no NUL-terminator or bounds check. During block-scalar...

Security update for gimp (important)

openSUSE security update: security update for gimp ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21359-1 Rating: important References: bsc1270239 bsc1270299 bsc1270444 Cross-References: CVE-2026-58379 CVE-2026-58380 CVE-2026-58381 CVSS scores:...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 3d-crystal-model (0.1.0) +3504 more potentially affected by CVE-2026-54466 via websocket-driver (>=0.3.5, <=0.7.4)

websocket-driver NPM version =0.3.5, =1.0.1, =0.1.2, =1.0.8, =0.1.0, =0.1.21, =1.0.0, =1.0.5, =0.2.0, =3.4.1, =0.1.1, =0.1.272 - @themis/usescheme 1.1.4 - @ab-task/react-tool-belt 0.1.1 and more Source cves: CVE-2026-54466 Source advisory: SNYK:JS-WEBSOCKETDRIVER-17987994...

OPENSUSE-SU-2026:21359-1 Security update for gimp

This update for gimp fixes the following issues: Changes in gimp: - CVE-2026-58379: Fix PSP File Parsing Heap Buffer Overflow bsc1270299 - CVE-2026-58380: Fix buffer overflow in pnmscannergettoken bsc1270444 - CVE-2026-58381: Prevent double-freeing PSP layer name bsc1270239...

bbot v3.0.0

BEE·bot is a multipurpose scanner inspired by Spiderfoot, built to automate your Recon , Bug Bounties , and ASM! https://github.com/blacklanternsecurity/bbot/assets/20261699/e539e89b-92ea-46fa-b893-9cde94eebf81 A BBOT scan in real-time - visualization withVivaGraphJS Installation root@kitploit:...

gitgalaxy — Updated!

GitGalaxy Docs · Visualizer 1 scan · 97 structural signals · 50+ languages · 0 need for compilation 19 risk exposure scores · 6 final reports · 0 dependencies · pip install gitgalaxy What Pain Point Does This Solve? GitGalaxy exists for one recurring problem: understanding a large, real,...

CVE-2026-40956: Exposure of Sensitive Information to an Unauthorized Actor

CVE-2026-40956 is a memory disclosure vulnerability in Secure Access client versions prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can cause a small amount of random memory to leak...

CVE-2026-59838: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A improper neutralization of script-related html tags in a web page basic xss vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.2.0 through 7.2.6, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions, FortiSIEM 6.7 all versions, FortiSIEM 6.6 all versions,...

CVE-2026-58559: Memory Allocation with Excessive Size Value

DoS vulnerability in the vibration service. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-58558: Undefined Security Weakness

Permission control vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-58555: Undefined Security Weakness

Permission bypass vulnerability in the card module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-58554: Exposure of Sensitive Information to an Unauthorized Actor

Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-58553: Buffer Copy without Checking Size of Input

Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...