PT-2026-102303

Name of the Vulnerable Software and Affected Versions Matrimonial System version 1.0 Description Remote SQL injection is possible via the Profile Creation Endpoint. The issue occurs in the processprofile form function within the /create profile file when handling the fname variable. SQL injection...

PT-2026-102382

A code injection vulnerability has been discovered in the Robot Operating System 2 ROS 2 'ros2topic' command-line tool, affecting all ROS 2 distributions from Crystal Clemmys up to and including Lyrical Luth and Rolling Ridley. The vulnerability lies in the 'hz' verb, which reports the publishing...

PT-2026-102372

Name of the Vulnerable Software and Affected Versions Wind River VxWorks 7 versions prior to 26.09 Description Specific system call arguments can cause the process management subsystem to fail to properly release allocated kernel memory before the calling application is terminated. Recommendation...

PT-2026-99808

Name of the Vulnerable Software and Affected Versions eBA Plus Document and Workflow Management System versions 6.7.141 through 10.0.10 Description An improper limitation of a pathname to a restricted directory, known as Path Traversal, exists in the system. This flaw allows an attacker to access...

PT-2026-99872

Name of the Vulnerable Software and Affected Versions Apache ActiveMQ Artemis versions prior to 2.34.0 Description An unsafe reflection issue exists in the FederationStreamConnectMessage.getFederationPolicy function. The system calls Class.forNameclazz.getConstructor.newInstance using a clazz val...

CVE-2026-102004: Out-of-bounds Write

Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory management subsystem. Fixed in Version 26.09...

PT-2026-99809

Name of the Vulnerable Software and Affected Versions eBA Plus Document and Workflow Management System versions 6.7.141 through 10.0.10 Description Improper neutralization of input during web page generation in the Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management Syst...

PT-2026-99883

Name of the Vulnerable Software and Affected Versions Netcore NR289-GE version 1.4.5102 Description An OS command injection flaw exists in the CGI Handler component. A remote attacker can exploit this by manipulating the ip argument within the /ap ip.cgi endpoint, which is processed by the system...

Separation of Duties for Privileged LLM Agents: A Governed Execution Architecture with Measured Security-Utility Trade-Offs

Large language model agents are increasingly granted real privileges executing commands, modifying files, calling APIs, so an agent that errs has already acted. Existing defences concentrate on the agent's inputs, while the path from a candidate action to privileged side effects remains less...

PT-2026-99777

Name of the Vulnerable Software and Affected Versions Post Voting System WordPress plugin version 1.0 Description An issue exists where the software fails to properly sanitize and escape a parameter before incorporating it into a SQL query. This allows authenticated users to execute SQL injection...

Input Leap Arbitrary Command Execution

Missing authentication for a critical function in the input-leapd daemon of Input Leap, the open-source keyboard and mouse sharing tool, allows a local, low-privileged user on Windows to execute arbitrary commands as NT AUTHORITY\SYSTEM by sending a single IPC command message to the daemon's...

PT-2026-103020

Name of the Vulnerable Software and Affected Versions PCRE2 versions prior to 10.49 Description An out-of-bounds write occurs when an attacker-controlled regular expression is used in conjunction with specific JIT API usage. This issue affects the pcre2 jit compile and pcre2 jit match functions,...

ROS-20260928-73-0021

The vulnerability in the sound/soc/intel/boards/bytcrrt5640.c kernel of the Linux operating system relates to reading data outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

CVE-2024-42002

A code injection vulnerability has been discovered in the Robot Operating System 2 ROS 2 'ros2topic' command-line tool, affecting all ROS 2 distributions from Crystal Clemmys up to and including Lyrical Luth and Rolling Ridley. The vulnerability lies in the 'hz' verb, which reports the publishing...

...[ More ]

GDCM Grassroots DICOM is an open-source C++ library for reading, writing, and processing DICOM Digital Imaging and Communications in Medicine medical imaging files. The library function gdcm::System::EncodeBytes, defined in Source/Common/gdcmSystem.cxx, is vulnerable to a stack-based buffer...

PT-2026-99943

Name of the Vulnerable Software and Affected Versions WatchGuard AP affected versions not specified Description An OS command injection flaw in the diagnostic CLI allows an authenticated administrator to execute arbitrary operating system commands by providing specially crafted input...

PT-2026-99810

Name of the Vulnerable Software and Affected Versions eBA Plus Document and Workflow Management System versions 6.7.141 through 10.0.10 Description An unrestricted upload of files with dangerous types allows an attacker to upload a web shell to the web server, which can lead to remote command...

Multi-Class, Multi-Tier Network Intrusion Detection: A Comprehensive and Reproducible Benchmark

Machine learning ML and deep learning DL have dominated Intrusion Detection System IDS research in recent years. Unfortunately, many existing studies have produced inflated results and unreliable benchmarks due to critical oversights and mistakes in the ML and DL pipeline, from data collection an...

ROS-20260928-73-0056

The vulnerability of the functions hfsfindinit and hfsbrecfind in the fs/hfsplus/bfind.c module, which is part of Apple’s HFS extended file system support in Linux, stems from the use of an uninitialized variable. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20260928-73-0111

The vulnerability of the topologyparsecpucapacity function in the drivers/base/archtopology.c file of the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a system failure...