92306 matches found
CVE-2026-34862: Concurrent Execution using Shared Resource with Improper Synchronization
Race condition vulnerability in the power consumption statistics module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-21003: Undefined Security Weakness
Improper input validation in data related to network restrictions prior to SMR Apr-2026 Release 1 allows physical attackers to bypass the restrictions...
CVE-2026-30813: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via module search. This issue affects Pandora FMS: from 777 through 800...
CVE-2026-36942: Improper Neutralization of Special Elements used in an SQL Command
Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in the file /orms/admin/activities/manageactivity.php...
CVE-2026-36923: Improper Neutralization of Special Elements used in an SQL Command
Sourcecodester Cab Management System 1.0 is vulnerable to SQL Injection in the file /cms/admin/bookings/viewbooking.php...
CVE-2026-34863: Out-of-bounds Write
Out-of-bounds write vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-34867: Double Free
Double free vulnerability in the multi-mode input system. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-36937: Improper Neutralization of Special Elements used in an SQL Command
Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin/reservations/viewdetails.php...
CVE-2026-34859: Use After Free
UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...
SkillCyberPunk
Security Vulnerability Scanner A Claude Code plugin that auto...
web-pentest-tool
🛡️ AutoPenTest — Automated Penetration Testing Tool ⚠️ DI...
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: rancher-machine, kubernetes-csi-livenessprobe, lazydocker, nginx-prometheus-exporter, terraform-provider-random, kargo, cloud-provider-aws, dapr, flux, flux-source-controller, jitsucom-bulker, trillian, emissary, x509-certificate-exporter, aws-flb-firehose,...
Linux Distros Unpatched Vulnerability : CVE-2026-4151
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GIMP ANI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected...
Exploit for Deserialization of Untrusted Data in Facebook React
markdown Summary CVE-2025-55182 Scanner is a high-perfor...
CVE-2026-33092: External Control of System or Configuration Setting
Local privilege escalation due to improper handling of environment variables. The following products are affected: Acronis True Image OEM macOS before build 42571, Acronis True Image macOS before build 42902...
CVE-2026-31262: Exposure of Sensitive Information to an Unauthorized Actor
Cross Site Scripting vulnerability in Altenar Sportsbook Software Platform SB2 v.2.0 allows a remote attacker to obtain sensitive information and execute arbitrary code via the URL parameter...
CVE-2026-35663: Incorrect Use of Privileged APIs
OpenClaw before 2026.3.25 contains a privilege escalation vulnerability allowing non-admin operators to self-request broader scopes during backend reconnect. Attackers can bypass pairing requirements to reconnect as operator.admin, gaining unauthorized administrative privileges...
CVE-2025-58913: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in CactusThemes VideoPro videopro allows PHP Local File Inclusion.This issue affects VideoPro: from n/a through = 2.3.8.1...
CVE-2026-4482: Incorrect Permission Assignment for Critical Resource
The installer certificate files in the …/bootstrap/common/ssl folder do not seem to have restricted permissions on Windows systems users have read and execute access. For the client.key file in particular, this could potentially lead to exploits, as this exposes agent identity material to any...