Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 26.7.2, Apple iPadOS versions prior to 26.7.2, Apple iOS versions prior to 27, and Apple iPadOS versions prior to 27. This vulnerability stems from insufficient permission checks and may allow applications to access sensitive user dat...

Apple iOS security vulnerabilities

Security vulnerabilities exist in Apple iOS versions prior to 26.7.2 and prior to 27.2, Apple iPadOS versions prior to 26.7.2 and prior to 27.2, Apple macOS versions prior to 27.2 for Golden Gate, prior to 15.8.2 for Sequoia, prior to 26.7.2 for Tahoe, prior to 27.2 for tvOS, prior to 27.2 for...

CVE-2026-116638

The Windows Recovery Environment WinRE in Windows 10 and 11 may allow an attacker to bypass firmware security controls, including administrator-configured UEFI/BIOS passwords. An attacker with physical or administrative access to a device may be able to leverage WinRE-related boot mechanisms to...

WordPress Bopo authorization issue vulnerability

WordPress Bopo versions 1.2.3 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, which may lead to exploitation of improperly configured access control levels...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 26.7.2 and Apple iPadOS versions prior to 26.7.2, Apple iOS versions prior to 27.2 and Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, Apple macOS Taho...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe versions prior to 26.7.2. This vulnerability stems from access control issues and insufficient sandbox restrictions, potentially allowing...

Billabear authorization issue vulnerability

Billabear versions 2025.01.03 and earlier contain an authorization issue vulnerability. This vulnerability stems from the absence of authentication in the processInstall function within the file src/BillaBear/Controller/InstallController.php in the Installation Handler component, potentially...

JIZHICMS permission and access control issues vulnerability

Versions JIZHICMS 2.5.6 and earlier contain a security vulnerability. This vulnerability stems from improper handling of the ‘orderno’ parameter within the Pay function of the file app/home/c/OrderController.php in the Front-end Order Handler component. It may lead to unauthorized access, and...

DeepSeek Harness permission and access control issue vulnerability

DeepSeek Harness versions 0.1.0-rc.5 and earlier contain a vulnerability related to permission escalation and access control. This issue stems from an operation within the createContext function in the file packages/extensions/cordis-host-runner/src/sandbox.ts, which leads to sandbox issues and m...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe versions prior to 26.7.2. This vulnerability stems from an access control issue and may allow applications to bypass sandbox restrictions...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.10. It arises because btintelpciepreparetx uses tfdindex to access the TFD and data buffer array before incrementing the index based on modulo operation with txq-count. Boundary checks fail to reject out-of-bounds indices equal to txq-coun...

Webasyst Framework cross-site request forgery vulnerability

Webasyst Framework versions 4.4.0 and earlier contain a cross-site request forgery vulnerability. This flaw arises because the Photos application fails to enable CSRF checks within the framework; it is thus susceptible to such attacks. Attackers can trick logged-in Photos users into visiting...

Syncplify Server path traversal vulnerability

Versions prior to Syncplify Server 8.8.0 contain a path traversal vulnerability. This vulnerability stems from an access control bypass, allowing authenticated SFTP users to exploit case-insensitive file system path resolution and the 8.3 short filename feature to bypass per-path permissions. As ...

Meow Apps AI Engine authorization issue vulnerability

Meow Apps AI Engine versions 3.8.6 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks, which may allow attackers to exploit improperly configured access control security levels...

vLLM configuration error vulnerability

Versions of vLLM prior to 0.32.0 contain a configuration error vulnerability. This vulnerability arises because OpenAI-compatible servers by default set allowedorigins for Starlette CORSMiddleware to a wildcard value. As a result, malicious web pages can exploit this flaw, allowing victims’...

WordPress Discussion Board authorization issue vulnerability

WordPress Discussion Board versions 2.6.0 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, which may lead to exploitation of improperly configured access control levels...

WordPress DEPART authorization issue vulnerability

WordPress DEPART versions 1.0.10 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, enabling exploitation of improperly configured access control levels...

WordPress Geo Mashup authorization issue vulnerability

WordPress Geo Mashup versions 1.13.22 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks and may lead to exploitation of improperly configured access control levels...

WordPress LearnPress authorization issue vulnerability

WordPress LearnPress versions 4.4.11 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks, which may allow attackers to exploit improperly configured access control levels...

Daniel Gatis Rembg path traversal vulnerability

Versions of Daniel Gatis Rembg prior to 2.0.82 contain a path traversal vulnerability. This vulnerability arises because the publicly accessible /api/remove endpoint passes an attacker-controlled extras.sammodel parameter to both the SAM filename and the GitHub download URL without validating its...