717772 matches found
magepeopleteam Booking and Rental Manager authorization issue vulnerability
MagepeopleTeam Booking and Rental Manager versions 2.8.2 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, potentially allowing exploitation of improperly configured access control levels...
PT-2026-123284
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Innotim Software, Telecommunications, and Consulting Co. Ltd. Logsign SIEM allows Path Traversal. This issue affects Logsign SIEM: from 6.4.120 before 6.4.122...
Apple iOS security vulnerabilities
A security vulnerability exists in Apple iOS versions prior to 18.7.11, Apple iPadOS versions prior to 18.7.11, Apple iOS versions prior to 26.7.2, Apple iPadOS versions prior to 26.7.2, Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior ...
WordPress Royal Addons for Elementor authorization issue vulnerability
WordPress Royal Addons for Elementor versions 1.7.1069 and earlier contain an authorization issue vulnerability. This vulnerability stems from improper access control configurations, allowing attackers to bypass authorization using keys controlled by users, potentially leading to unauthorized...
DataTransfer Component Protected Information Access
The vulnerability in the DataTransfer component of Google Chrome and Microsoft Edge web browsers is related to a flaw in the source verification mechanism. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...
JetBrains YouTrack Authorization Bypass
The vulnerability in JetBrains YouTrack’s project and task management software is related to an improper authorization process based on a list of permitted senders. Exploitation of this vulnerability could allow a remote attacker to bypass existing security mechanisms and gain unauthorized access...
DeviceBoundSessionCredentials Google Chrome Microsoft Edge Access Information
The vulnerability in the DeviceBoundSessionCredentials component of Google Chrome and Microsoft Edge is related to cross-site request forgery. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...
Google Chrome Microsoft Edge Protected Information Access
The vulnerability in the FileSystem component of Google Chrome and Microsoft Edge is related to improper authorization. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted PDF file...
DataTransfer Component Protected Information Access
The vulnerability in the DataTransfer component of Google Chrome and Microsoft Edge web browsers is related to insufficient validation of the state of shared resources. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted...
Isolated component Protected Information Access
The vulnerability in the Isolated web browser components of Google Chrome and Microsoft Edge is related to improper authorization. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...
Google Chrome Microsoft Edge Protected Information Access
The vulnerability in the FileSystem component of Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...
Unveiling Sirius Backdoor: A Multistage Fileless Campaign Disguised as FedEx Invoices
Unveiling Sirius Backdoor: A Multistage Fileless Campaign Disguised as FedEx Invoices By Shashikala Piddannavar, Raymond Joseph Alfonso and Sagar Bade · October 26, 2026 Introduction During a recent priority customer escalation, our “Trellix” Threat Response Team investigated a suspicious alert...
Debian dla-4861 : openjdk-17-dbg - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4861 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4861-1 [email protected]...
PT-2026-123381
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.113 Linux kernel versions prior to 6.18.57 Description An out-of-bounds access issue exists in the btintel pcie Bluetooth driver. The btintel pcie prepare tx function uses the tfd index variable to access th...
CVE-2026-116096
A weakness has been identified in ggml-org llama.cpp. Affected by this issue is the function listpocketttsstateslots of the file tools/mtmd/models/pockettts-gen.cpp of the component Pocket-TTS. This manipulation of the argument mmproj causes out-of-bounds write. The attack requires local access...
DEBIAN-CVE-2026-116096
A weakness has been identified in ggml-org llama.cpp. Affected by this issue is the function listpocketttsstateslots of the file tools/mtmd/models/pockettts-gen.cpp of the component Pocket-TTS. This manipulation of the argument mmproj causes out-of-bounds write. The attack requires local access...
CVE-2026-116096 ggml-org llama.cpp Pocket-TTS pockettts-gen.cpp list_pockettts_state_slots out-of-bounds write
A weakness has been identified in ggml-org llama.cpp. Affected by this issue is the function listpocketttsstateslots of the file tools/mtmd/models/pockettts-gen.cpp of the component Pocket-TTS. This manipulation of the argument mmproj causes out-of-bounds write. The attack requires local access...
CVE-2026-116096
A weakness has been identified in ggml-org llama.cpp. Affected by this issue is the function listpocketttsstateslots of the file tools/mtmd/models/pockettts-gen.cpp of the component Pocket-TTS. This manipulation of the argument mmproj causes out-of-bounds write. The attack requires local access...
CVE-2026-116096 ggml-org llama.cpp Pocket-TTS pockettts-gen.cpp list_pockettts_state_slots out-of-bounds write
A weakness has been identified in ggml-org llama.cpp. Affected by this issue is the function listpocketttsstateslots of the file tools/mtmd/models/pockettts-gen.cpp of the component Pocket-TTS. This manipulation of the argument mmproj causes out-of-bounds write. The attack requires local access...
CVE-2026-116096
A weakness has been identified in ggml-org llama.cpp. Affected by this issue is the function listpocketttsstateslots of the file tools/mtmd/models/pockettts-gen.cpp of the component Pocket-TTS. This manipulation of the argument mmproj causes out-of-bounds write. The attack requires local access...