CVE-2026-34850: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition vulnerability in the notification service. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-25208: Integer Overflow or Wraparound

Integer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335...

CVE-2026-34188: Improper Neutralization of Special Elements used in an OS Command

Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via Event Response execution. This issue affects Pandora FMS: from 777 through 800...

CVE-2026-30809: Improper Neutralization of Special Elements used in an OS Command

Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via WebServerModuleDebug. This issue affects Pandora FMS: from 777 through 800...

CVE-2026-30804: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability allows Remote Code Execution via file upload. This issue affects Pandora FMS: from 777 through 800...

Marimo Vulnerable Version Scanner

Marimo versions prior to 0.23.0 suffer from a remote code execution vulnerability. This tool scans the version to see if your installation is susceptible but does not provide any exploitation functionality...

CVE-2026-36920: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Online Reviewer System v1.0 is vulnerable to SQL Injection in the file /system/system/admins/assessments/examproper/questions-view.php...

CVE-2026-4786: Improper Neutralization of Special Elements used in a Command

Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open" API could have commands injected into the underlying shell. See CVE-2026-4519 for details...

CVE-2026-34851: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-34186: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via custom fields. This issue affects Pandora FMS: from 777 through 800...

CVE-2026-5936: Server-Side Request Forgery (SSRF)

An attacker can control a server-side HTTP request by supplying a crafted URL, causing the server to initiate requests to arbitrary destinations. This behavior may be exploited to probe internal network services, access otherwise unreachable endpoints e.g., cloud metadata services, or bypass...

CVE-2026-34858: Concurrent Execution using Shared Resource with Improper Synchronization

UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-34856: Concurrent Execution using Shared Resource with Improper Synchronization

UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-34852: Loop with Unreachable Exit Condition

Stack overflow vulnerability in the media platform. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-34862: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition vulnerability in the power consumption statistics module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-28553: Undefined Security Weakness

Vulnerability of improper permission control in the theme setting module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-34857: Concurrent Execution using Shared Resource with Improper Synchronization

UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-34866: Buffer Copy without Checking Size of Input

Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

CVE-2026-6179: Improper Neutralization of Input During Web Page Generation

Stored Cross Site Scripting in NightWolf Penetration Testing Platform allows attack trigger and run malicious script in user's browser...

CVE-2026-34849: Concurrent Execution using Shared Resource with Improper Synchronization

UAF vulnerability in the screen management module. Impact: Successful exploitation of this vulnerability may affect availability...