EUVD-2025-210575

SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection in /admin/deletegroup.php?id=1...

EUVD-2026-51649

TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 were discovered to contain a command injection vulnerability in the system.upgradecheck interface. This vulnerability allows attackers to execute...

EUVD-2026-51646

TR1200 v2.4.15 and TR3000 v2.4.21 were discovered to contain a command injection vulnerability in the system.setclock interface. This vulnerability allows attackers to execute arbitrary commands as root via a crafted input...

Fedora 43 : unbound (2026-3170ee6a1c)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3170ee6a1c advisory. Update to 1.25.2 rhbz2506061 Security fixes: - Fix CVE-2026-14586, Assertion in libngtcp2 when under pressure in high concurrency DNS-over-QUIC...

CVE-2025-69948

SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection in /admin/delete_group.php?id=1. Root cause: unsafely concatenated SQL in the delete_group endpoint (no explicit details beyond description). Impact is high (confidentiality, integrity, and availability potentially af...

CVE-2026-38711

CVE-2026-38711 affects TR1200 (v2.4.15), TR3000 (v2.4.21), WR300 (v2.4.25), WR1200 (v2.4.23), WR1300 (v2.4.22), WR1500 (v2.3.10), WR3000 (v2.4.19), WR3600 (v2.3.16), and WR6500 (v2.3.15). Description: a command injection vulnerability exists in the system.upgrade_check interface that allows an at...

CVE-2026-38708

TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 were discovered to contain a command injection vulnerability in the system.setclock interface. This vulnerability allows attackers to execute arbitrary...

PT-2026-66855

Name of the Vulnerable Software and Affected Versions TR1200 version 2.4.15 TR3000 version 2.4.21 Description A command injection issue exists in the 'system.setclock' interface. This allows an attacker to execute arbitrary commands with root privileges by providing a specially crafted input...

Important Photon OS Security Update - PHSA-2026-5.0-0936

Updates of 'openssh' packages of Photon OS have been released...

Qnap QTS and QuTS hero Stack-based Buffer Overflow (CVE-2025-62858)

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following versions:...

CVE-2026-38710

CVE-2026-38710 affects TR1200 v2.4.15 and TR3000 v2.4.21. The issue is a command injection in the system.setclock interface that allows an attacker to execute arbitrary commands as root via crafted input. Impact is described as root-level command execution; no exploitation details or mitigations ...

CVE-2026-17924

An use after free flaw was found in the DNS component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513714124...

ECHO-B786-F282-5D46

Bulletin has no description...

CVE-2026-18064

An incomplete fix for CVE-2026-15352 in the NASA core Flight System cFS Health and Safety HS application leaves a separate NULL pointer dereference reachable in versions through 7.0.1. An attacker who can trigger the affected command under specific conditions could cause the HS application to...

CVE-2026-12562

The RCU II+ and Multiload II+ are vulnerable to an unauthenticated service that exposes a debug interface granting full root-level access to the embedded system. This vulnerability stems from a network-accessible port running a Target Communications Framework TCF service that does not require any...

MAL-2026-11200 Malicious code in ml-fdbk-shared (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2f2313f59d10884a764cb2e2dbfe3aa8ae97545c995785f65ca1e856b4a29b8c During installation, package exfiltrates basic info and all environmental variables. --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

MAL-2026-11202 Malicious code in ml-shared (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89a726ddb6cfd4ce7da05b1b8c75e896e38789aa418c71d4db76f499b5727cb3 setup.py defines a function named analytics that collects the installer's hostname, username, current working directory, and the entire process...

Malicious code in compose-logger-stand (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a34de797bc2020fd52b9b36fda8513a111610612c3a50e75d8ea8a79440be4f0 [email protected] presents itself as a logger but its shipped code implements a credential-harvest and exfiltration pipeline...

CVE-2026-18064 NASA Core Flight System (cFS) Health & Safety (HS) Application NULL Pointer Dereference

An incomplete fix for CVE-2026-15352 in the NASA core Flight System cFS Health and Safety HS application leaves a separate NULL pointer dereference reachable in versions through 7.0.1. An attacker who can trigger the affected command under specific conditions could cause the HS application to...

CVE-2026-18064

CVE-2026-18064 affects NASA’s core Flight System (cFS) Health and Safety (HS) application. The issue is an incomplete fix for CVE-2026-15352, leaving a separate NULL pointer dereference exploitable in HS versions up to and including 7.0.1. A successful trigger of the affected command under specif...