CVE-2026-21131

Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow privileges on the connected device...

CVE-2026-21130

Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges...

EUVD-2026-97194

Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges...

CVE-2026-21130

Improper input validation in the CreditCardRetrieveActivity component of Samsung Checkout (versions prior to 5.1.03.1 ) allows local attackers to launch an arbitrary activity with Samsung Checkout privileges . No specific exploit details or remediation steps are provided in the documents.

CVE-2026-21129

Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges...

CVE-2026-21129

Versions of Samsung Checkout prior to version 5.1.03.1 are vulnerable to a flaw in the GuestCreditCardRegisterActivity component. Due to improper input validation , a local attacker can launch an arbitrary activity with Samsung Checkout privileges. No specific exploit information or remediation s...

EUVD-2026-97193

Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges...

CVE-2026-21128

Improper input validation in the CreditCardRegisterActivity component of Samsung Checkout (prior to version 5.1.03.1 ) allows a local attacker to launch an arbitrary activity with Samsung Checkout privileges . No specific exploit code or in-the-wild exploitation details are provided in the docume...

CVE-2026-21131: Incorrect Default Permissions

Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow privileges on the connected device...

CVE-2026-109565: Improper Neutralization of Input During Web Page Generation

Rapyd Admin from 9.4.0 before 9.20.0 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through self-registered display names. Attackers can register with an HTML or JavaScript name rendered unescaped in the Activity log Author filter,...

CVE-2026-21128: Improper Input Validation

Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch arbitrary activity with Samsung Checkout privileges...

CVE-2026-21130: Improper Input Validation

Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges...

PT-2026-110941

🚨 CVE-2026-109565 Rapyd Admin from 9.4.0 before 9.20.0 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through self-registered display names. Attackers can register with an HTML or JavaScript name rendered unescaped in the Activity log...

simplewall

simplewall Definitivamente para usuarios avanzados. Descripción: Herramienta simple para configurar la Plataforma de Filtrado de Windows WFP que puede configurar la actividad de red en su computadora. La aplicación ligera pesa menos de un megabyte y es compatible con Windows 7 SP1 y sistemas...

genact

genact - un generador de actividades absurdas ¡Finge estar ocupado o esperando a tu computadora cuando en realidad deberías estar haciendo trabajo real! Impresiona a la gente con tus increíbles habilidades multitarea. Simplemente abre unas cuantas instancias de genact y mira el espectáculo. genac...

reportly

Reportly es una herramienta de informes de actividad de usuarios de EntraID. Acerca de la herramienta Esta es una herramienta que ayudará a los equipos azules durante un incidente en la nube. Al ejecutar la herramienta, el investigador ingresará como entrada un usuario sospechoso y un período de...

MAL-2026-17747 Malicious code in kmf-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce04d25dced1e4c2398d7d91568783b983f326444098ecff8ddf7c29468d752c [email protected] is published with the version-number and behavior shape of a dependency-confusion reconnaissance beacon rather than an i18n...

Malicious code in kafka-roller (PyPI)

Source: ossf-package-analysis 4b68fa52500e16cab90e8038ae96e2ba1be6c448a8caa40ab3e46dc6d3c26436 The OpenSSF Package Analysis project identified 'kafka-roller' @ 99.0.0 pypi as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity...

CVE-2026-107393

FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.235, when APPCLOUDFLAREISUSED is enabled, FreeScout trusts an unvalidated CF-Connecting-IP header during failed login attempts and stores the spoofed value in the activity log. LogsMonitor inserts the value into an administrato...

CVE-2026-107393

Prior to version 1.8.235 , FreeScout (a self-hosted help desk) is vulnerable to Stored HTML Injection when the APP_CLOUDFLARE_IS_USED setting is enabled. The application trusts an unvalidated CF-Connecting-IP header during failed login attempts and stores the spoofed value in the activity log. Th...