PT-2026-123396

Open5GS 1.3.0 through 2.8.0 contains a heap out-of-bounds write vulnerability in parse multipart that allows unauthenticated attackers to corrupt memory by supplying an empty multipart boundary. Attackers can send a single crafted multipart/related request to the SBI interface of any network...

PT-2026-125477

Name of the Vulnerable Software and Affected Versions libfvde versions prior to 20260924 Description A heap out-of-bounds read occurs in the libfvde encrypted metadata read type 0x0024 function because the xml plist data size variable is not validated against the source metadata block. An attacke...

PT-2026-125476

Name of the Vulnerable Software and Affected Versions gbsplay versions 0.0.1 through 0.0.103 Description A heap out-of-bounds read occurs in the vgm open function within gbs.c because the VGM command stream is processed without proper bounds checks. An attacker can cause the player to crash by...

CVE-2026-115722

RPly through 1.1.4 contains an improper array index validation vulnerability in plyreadheaderproperty that accepts list as a list property's length or value type. Attackers can supply a crafted PLY file that makes plyreadlistproperty call an out-of-bounds handler, crashing ASCII parsing or...

UBUNTU-CVE-2026-99018

In the Linux kernel, the following vulnerability has been resolved: riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp Under CONFIGSHADOWCALLSTACK, handleexception reloads the kernel shadow call stack pointer gp only when the trap came from userspace. It made that decision with...

PT-2026-125480

Name of the Vulnerable Software and Affected Versions Furnace versions prior to 0.6.8.4 Description An out-of-bounds write exists in the DivEngine::loadFTM function. This occurs when the software processes a FamiTracker module containing a GROOVES block with an unchecked subsong index. An attacke...

PT-2026-123403

A vulnerability was found in DeepSeek Harness up to 0.1.0-rc.5. This vulnerability affects the function createContext of the file packages/extensions/cordis-host-runner/src/sandbox.ts. The manipulation results in sandbox issue. It is possible to launch the attack remotely. The vendor was contacte...

PT-2026-125487

VMime through 0.9.2 contains an integer underflow in the uuEncoder::decode function that allows remote attackers to trigger a stack-based buffer overflow via crafted uuencoded MIME parts. Attackers can send an email with a uuencoded line whose length character is 'b' but is not a 'begin' line,...

PT-2026-125475

Name of the Vulnerable Software and Affected Versions gbsplay versions 0.0.1 through 0.0.103 Description A heap out-of-bounds read occurs in the gbr open function within gbs.c because the software fails to verify the file length before scanning the GBR ROM title field. An attacker can provide a...

PT-2026-125381

A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268 B20221104. This affects the function setCloudUpgradeFW of the file lib/cste modules/upgrade.so of the component Cloud Upgrade. The manipulation of the argument FileName leads to command injection. The attack can be initiated remotely...

PT-2026-125462

A vulnerability was identified in TOTOLINK A950RG 4.1.2cu.5268 B20221104. Affected by this vulnerability is the function getLanguageCfg of the file global.so. Such manipulation of the argument token leads to information disclosure. The attack may be launched remotely. The exploit is publicly...

PT-2026-125104

A vulnerability was detected in a2aproject a2a-go up to 2.4.0. This affects the function CreateExecutor of the file a2asrv/agentexec.go of the component Push Notification Handler. The manipulation results in information exposure through error message. It is possible to launch the attack remotely...

PT-2026-123157

A vulnerability was determined in 2K Games Civilization V 1.0.3.144. Impacted is the function loadstring of the component Lua Sandbox. Executing a manipulation can lead to type confusion. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The...

Tenda BE3L Pro Form Wifi Basic Set Code Execution

The vulnerability in the formWifiBasicSet function of the Tenda BE3L Pro router software involves buffer overflow when processing the security5g parameter. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary code...

PT-2026-125517

OpenPanel before 3.0.0 contains a sandbox escape vulnerability in the js-runtime validator that allows a project member to bypass the AST allowlist by aliasing the Function constructor. Attackers with write access can read payload.constructor.constructor into a local and call it to run arbitrary...

PT-2026-123179

A flaw has been found in icret EasyImage up to 2.8.7. The impacted element is an unknown function of the file app/del.php. Executing a manipulation of the argument hash can lead to improper privilege management. The attack can be launched remotely. The exploit has been published and may be used...

PT-2026-125474

Name of the Vulnerable Software and Affected Versions gbsplay versions 0.0.1 through 0.0.103 Description An out-of-bounds read occurs in the mapper map function within mapper.c because the software fails to reject ROM bank indexes that exceed the ROM size, leading to an underflowed bank length. A...

PT-2026-125091

A security flaw has been discovered in BKWLD Decoy up to 5.11.1. The impacted element is an unknown function of the file Policy.php of the component Authorization Policy. The manipulation of the argument role results in improper privilege management. The attack may be performed from remote. The...

PT-2026-123196

A vulnerability was identified in Ndemic Creations Plague Inc Evolved up to 1.24.0.3. The affected element is an unknown function of the component Workshop Scenario Loader. Such manipulation leads to deserialization. The attack may be performed from remote. Upgrading to version 1.24.0.4 is...

PT-2026-123216

A vulnerability has been found in Oray Pugongying X5 Pro 7.6.1. Affected by this issue is the function plugin init of the file /tmp/upload files of the component PPPoE WAN Setting Handler. Such manipulation of the argument pppd options leads to unrestricted upload. The attack may be launched...