CVE-2025-31975: Exposure of Sensitive Information to an Unauthorized Actor

HCL BigFix Service Management SM is affected by an Information Disclosure – Server Banner issue was identified. Exposed server banners may reveal software versions and system details, potentially aiding attackers in targeting known vulnerabilities...

CVE-2026-43210: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tracing: ring-buffer: Fix to check event length before using Check the event length before adding it for accessing next index in rbreaddatabuffer. Since this function is used for validating possibly broken ring buffers, the lengt...

CVE-2026-43646: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Wicket. This issue affects Apache Wicket: from 8.0.0 through 8.17.0, from 9.0.0 through 9.22.0, from 10.0.0 through 10.8.0. Users are recommended to upgrade to version 10.9.0, which fixes the issue...

Linux Distros Unpatched Vulnerability : CVE-2026-43095

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: SDCA: Fix errors in IRQ cleanup IRQs are enabled through sdcairqpopulate from component probe using devmrequestthreadedirq, this however means the IRQs ca...

CVE-2026-23927: Insufficiently Protected Credentials

A user able to connect to Agent 2 can inject an Oracle TNS connection string via the 'service' parameter. This can lead to Agent 2 connecting to an attacker-controlled server and leaking Oracle database credentials if they are saved in a named session...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

CopyFail-Scanner-CVE-2026-31431 CopyFail-Scanner es una herram...

CVE-2026-43573: Missing Authorization

OpenClaw before 2026.4.10 contains a server-side request forgery policy bypass vulnerability in existing-session browser interaction routes. Attackers can bypass SSRF navigation guards to interact with or navigate to unauthorized targets without policy enforcement...

CVE-2026-42439: Missing Authorization

OpenClaw before 2026.4.10 contains a server-side request forgery policy bypass vulnerability in the browser tabs action select and close routes. Attackers can bypass configured browser SSRF policy protections by exploiting the /tabs/action endpoint to perform unauthorized tab navigation operation...

CVE-2026-40797: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Saleswonder LLC WebinarIgnition allows Blind SQL Injection. This issue affects WebinarIgnition: from n/a through 4.08.253...

CVE-2026-38947: Improper Neutralization of Input During Web Page Generation

FluentCMS 1.2.3 is vulnerable to Cross Site Scripting XSS in TextHTML plugin...

CVE-2025-52206: Improper Neutralization of Input During Web Page Generation

ISPConfig 3.3.0 is vulnerable to Cross Site Scripting XSS via the system status webpage...

sshprank 1.7.0

sshprank is a fast SSH mass-scanner, login cracker, and banner grabber tool using the python-masscan and shodan modules...

CVE-2026-25266: Exposed Dangerous Method or Function

Memory corruption while processing IOCTL command when device is in power-save state...

CVE-2026-24082: Use After Free

Memory Corruption when copying data from a freed source while executing performance counter deselect operation...

CVE-2025-47404: Buffer Copy without Checking Size of Input

Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified...

CVE-2025-47401: Buffer Over-read

Transient DOS when processing target power rate tables during channel configuration...

CVE-2026-43861: Improper Neutralization of Null Byte or NUL Character

mutt before 2.3.2 does not check for '\0' in urlpctdecode...

CVE-2025-47405: Untrusted Pointer Dereference

Memory corruption when processing camera sensor input/output control codes with invalid output buffers...

CVE-2026-43616: Relative Path Traversal

Detect-It-Easy prior to 3.21 contains a path traversal vulnerability that allows attackers to write arbitrary files to the filesystem by crafting malicious archive entries with relative traversal sequences or absolute paths. Attackers can exploit insufficient path normalization during archive...

CVE-2026-42075: Improper Limitation of a Pathname to a Restricted Directory

Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a path traversal vulnerability in the skill download fetch command allows attackers to write files to arbitrary locations on the filesystem. The --out= flag accepts user-provided paths without validation, enabli...