319364 matches found
CVE-2026-2346 IDOR in Menulux Software's Mobile App
Authorization bypass through User-Controlled key vulnerability in Menulux Software Inc. Mobile App allows Software Integrity Attack. This issue affects Mobile App: through 12.05.2026...
CVE-2026-2346
Authorization bypass through User-Controlled key vulnerability in Menulux Software Inc. Mobile App allows Software Integrity Attack. This issue affects Mobile App: through 12.05.2026...
CVE-2026-2346
CVE-2026-2346 affects Menulux Software’s Mobile App up to version 12.05.2026, with an IDOR authorization bypass via a user-controlled key. The CVSS v3.1 score is 9.8 (CRITICAL), from vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating network attack with no privileges required and no ...
CVE-2026-2346 IDOR in Menulux Software's Mobile App
Authorization bypass through User-Controlled key vulnerability in Menulux Software Inc. Mobile App allows Software Integrity Attack. This issue affects Mobile App: through 12.05.2026...
Exploit for Command Injection in Microsoft
🛡️ YellowKey-Bitlocker-CVE-2026-45585 - Recover Your BitLocker...
Thermo Fisher Patches Flaw That Could Make DNA File Tampering Nearly Undetectable
Thermo Fisher Scientific has patched a flaw in select Applied Biosystems human identification software that could allow data files to be altered before analysis software loads them. The vendor's July 31 security bulletin says nearly undetectable changes to .fsa and .hid outputs could occur if...
EUVD-2026-52223
A vulnerability was determined in Wavlink WL-NU516U1 708c073-mt7628. Affected is the function setsysadm of the file adm.cgi of the component Admin Password Handler. This manipulation causes os command injection. The attack is possible to be carried out remotely. The exploit has been publicly...
N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incomplete
N-able said attackers exploited an authentication bypass in N-central to gain remote administrative access and reach the customer systems managed through those servers. Its first fix was incomplete. CVE-2026-18577 affects N-central builds prior to 2026.3.1.7. N-able shipped build 2026.3.1.7 on...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in PKCS12KeyStoreSpi, which feeds the attacker-controlled KDF iteration count from a PKCS12 file's MAC data and encrypted bags into key derivation during engineLoad without enforcing...
Cybozu Garoon vulnerable to cross-site scripting
Overview Scheduler in Cybozu Garoon provided by Cybozu, Inc contains the following vulnerability: Cross-Site Scripting CWE-79 - CVE-2026-57279 CyCDB-4148 Cybozu, Inc reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Cybozu, Inc coordinated under t...
CVE-2026-20491
A vulnerability exists in mediatek (med) components where an incorrect bounds check can lead to an out-of-bounds write . This flaw could result in a local denial of service (DoS). Exploitation requires user execution privileges and does not require user interaction. Remediation is available via P...
PT-2026-67539
Name of the Vulnerable Software and Affected Versions NASA cFS version 7.0.1 Description A parser boundary flaw exists in the Software Bus Network SBN application's peer subscription message handling. This issue allows an attacker to trigger a Denial of Service DoS by sending a specially crafted...
CVE-2026-67974
A parser boundary flaw in the Software Bus Network SBN application's peer subscription message handling in NASA cFS v7.0.1 allows attackers to cause a Denial of Service DoS via sending a crafted packet...
PT-2026-67540
Name of the Vulnerable Software and Affected Versions NASA cFS version 7.0.1 Description Incorrect access control allows attackers to arbitrarily remove low-index subscriptions and add new streams by sending TO LAB add/remove subscription commands. Recommendations At the moment, there is no...
CVE-2026-2346: Authorization Bypass Through User-Controlled Key
Authorization bypass through User-Controlled key vulnerability in Menulux Software Inc. Mobile App allows Software Integrity Attack. This issue affects Mobile App: through 12.05.2026...
CVE-2026-67974
A parser boundary flaw exists in the Software Bus Network (SBN) application's peer subscription message handling within NASA cFS v7.0.1 . This vulnerability allows an attacker to trigger a Denial of Service (DoS) by sending a crafted packet . No specific remediation instructions or exploit links ...
PT-2026-67146
A vulnerability has been found in Wavlink WL-NU516U1 708c073-mt7628. This affects the function fgets of the file nas.cgi. The manipulation of the argument CONTENT LENGTH leads to stack-based buffer overflow. Remote exploitation of the attack is possible. You should upgrade the affected component...
PT-2026-67390
Authorization bypass through User-Controlled key vulnerability in Menulux Software Inc. Mobile App allows Software Integrity Attack. This issue affects Mobile App: through 12.05.2026...