PT-2026-107076

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in FontAccess allows a remote attacker who has compromised the renderer process to bypass system access restrictions by using a crafted HTML page. Recommendation...

Cisco ASA Code Injection (CVE-2024-20485)

A vulnerability in the VPN web server of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary code with root-level privileges. Administrator-level privileges are required to exploit this...

PT-2026-106363

A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...

PT-2026-106391

A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile Field Handler. The manipulation of the argument firstname/lastname leads to cross site scripting. The attack may be...

PT-2026-106390

A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of the argument searchbox can lead to cross site scripting. The attack can be launched remotely. The exploi...

Command Injection vulnerability exists in Brocade Fabric OS REST API management interface

: A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated user to execute arbitrary system commands via crafted input parameters...

Local Privilege Escalation and Configuration Injection in Brocade Fabric OS System Logging Daemon

: A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Insufficient access controls on internal inter-process communication IPC channels allow an unprivileged local user to submit malformed logging...

Command Injection in Security Certificate Management Subsystem

: An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management API. When processing certificate management operations, user-supplied certificate identifiers are handled without adequate sanitization prior to execution...

Arbitrary File Read via Argument Injection in Configuration Search Utility

: An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When executing configuration viewing commands with search pattern filters, the utility fails to sanitize user-supplied search...

PT-2026-107208

Remote code execution vulnerabilities exist in the affected interface of HPE Networking ClearPass Policy Manager that could allow an authenticated remote attacker with high privileges to execute arbitrary code. Successful exploitation could allow an attacker to execute arbitrary commands on the...

ROS-20261006-73-0065

The vulnerability of the logicvcdrmconfigparse function in the drivers/gpu/drm/logicvc/logicvcdrm.c file of the Direct Rendering Infrastructure DRI driver module in the Linux kernel is related to improper memory release memory leak. Exploiting this vulnerability may allow a remote attacker to cau...

The vulnerability of the Resilient File System (ReFS) in Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Resilient File System ReFS in Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

Linux Distros Unpatched Vulnerability : CVE-2026-49878

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In wpashandlerobustavscsrecvaction of robustav.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code...

PT-2026-107103

In kdn set sysregs prot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-106296: Improper Privilege Management

Improper privilege management in UI in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106299: Improper Input Validation

Improper input validation in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

ROS-20261006-73-0080

The vulnerability of the mvpp2bmswitchbuffers function in the drivers/net/ethernet/marvell/mvpp2/mvpp2main.c file of the Ethernet network adapter driver for the Marvell-based Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a...

cve-2023-41564-research

CVE-2023-41564 취약점 개요 CVE-2023-415641는 Cockpit이라는 CMSmodule'assets'-extend // 省略 'upload' = functionstring|array $param = 'files', array $meta = , bool $isUpload = true $file...

CVE-2025-28355

CVE-2025-28355 https://github.com/Volmarg/personal-management-system アプリケーションが CSRF 攻撃に対して脆弱であることが特定されました。 攻撃者が実行できる多くのアクションの 1 つは、正当なユーザーを欺いてクロスサイトリクエストを実行させ、パスワードを変更させることです。 これにより、攻撃者はアプリケーションにアクセスできるようになります。この脆弱性には、“SameSite” Cookie 属性のデフォルト値が none である Firefox などのブラウザが必要です。 ベクター文字列 :...

CVE-2021-41649

CVE-2021-41649 CVE-2021-41649 online-shopping-system의 SQL 인젝션 online-shopping-system은 인증되지 않은 오류/boolean 기반 블라인드 및 오류 기반 SQL 인젝션 공격에 취약합니다. /homeaction.php 페이지의 catid 매개변수는 사용자 입력을 검증하지 않으며, 공격자는 기본 MySQL 데이터베이스에서 민감한 데이터를 추출할 수 있습니다. 애플리케이션 링크 online-shopping-system 영향받는 구성 요소 및 매개변수 URL:...