CVE-2026-116605

A vulnerability exists in the SourceCodester Online Food Ordering System 1.0 within an unknown function of the order.php file. The root cause is client-side enforcement of server-side security (CWE-602), where manipulating the price/title arguments allows for unauthorized actions. This vulnerabil...

CVE-2026-116605 SourceCodester Online Food Ordering System order.php client-side enforcement of server-side security

A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file order.php. The manipulation of the argument price/title results in client-side enforcement of server-side security. It is possible to launch the attack remotely. Th...

CVE-2026-116620

A security vulnerability has been detected in Tencent RapidJSON up to 1.1.0. This issue affects the function GenericStringStream::Take in the library include/rapidjson/stream.h of the component Regex Parser. The manipulation leads to out-of-bounds read. The attack can be initiated remotely. The...

PT-2026-126428

Name of the Vulnerable Software and Affected Versions Kali-GPT versions prior to commit a608c74 Description An OS command injection exists in the execute tool function within kali gpt/tools/mcp server.py. This issue allows MCP clients or prompt-injected agents to execute arbitrary commands as the...

PT-2026-126612

A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificationConfigStore.setInfo of the file...

CVE-2026-93865: Missing Authentication for Critical Function

A missing authentication vulnerability in the Fireware OS FireCluster synchronization daemon allows a remote, unauthenticated attacker to invoke privileged system-level administrative actions by sending a specially crafted request to the FireCluster management IP when the clustering feature is...

PT-2026-126414

CImg through 4.0.6 contains a heap out-of-bounds read vulnerability in the load bmp function of CImg.h caused by an integer overflow in the row byte count. Attackers can supply a crafted BMP file with a large header width that wraps dx bytes, causing crashes or heap memory disclosure into the...

PT-2026-126358

REDAXO core before 5.21.5 contains a missing authorization vulnerability in the rex api package API function that lets non-admin backend users manage packages with only a valid CSRF token. Attackers holding a token, such as demoted admins with active sessions, can uninstall system addons like...

ROS-20261027-73-0011

The vulnerability in the kbdintnextdevice function within the sshd service of the OpenSSH cryptographic suite is related to access control flaws in handling the oKbdInteractiveDevices parameter, which contains a list of methods for authenticating via an interactive keyboard. Exploitation of this...

PT-2026-126665

A vulnerability has been found in desmondmorris node-tesseract up to 0.2.7. Affected by this issue is the function process of the file lib/tesseract.js of the component Command Builder. Such manipulation of the argument image leads to os command injection. The attack can be executed remotely. The...

CVE-2026-117511: Improper Neutralization of Special Elements used in an OS Command

A vulnerability has been found in desmondmorris node-tesseract up to 0.2.7. Affected by this issue is the function process of the file lib/tesseract.js of the component Command Builder. Such manipulation of the argument image leads to os command injection. The attack can be executed remotely. The...

PT-2026-126684

Name of the Vulnerable Software and Affected Versions systeminformation versions prior to 5.33.14 Description The Linux implementation of the networkStatsiface function fails to properly validate the iface variable when performing an fs.existsSync check and constructing paths under /sys/class/net...

PT-2026-126696

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, a stack buffer overflow in the H.323 ooTrace trace-logging function can occur when unbounded vsprintf writes into a fixed...

CVE-2026-57201: Out-of-bounds Write

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, a stack buffer overflow in the H.323 ooTrace trace-logging function can occur when unbounded vsprintf writes into a fixed...

PT-2026-126613

A security vulnerability has been detected in a2aproject a2a-java up to 1.2.0.Final. This impacts the function TaskManager.saveTaskEvent. The manipulation leads to race condition. The attack may be initiated remotely. Upgrading to version 1.3.0.Final will fix this issue. The identifier of the pat...

PT-2026-127225

Name of the Vulnerable Software and Affected Versions MLflow versions 3.12.0 through 3.16.x Description Third-party scorer deserialization in mlflow/genai/scorers/base.py allows the import of request-selected descendants of allowed modules rather than requiring an exact match. An attacker can use...

PT-2026-126685

Name of the Vulnerable Software and Affected Versions systeminformation versions prior to 5.33.13 Description On FreeBSD, OpenBSD, and NetBSD, the networkStatsifaces function in lib/network.js stores per-interface data in a plain-object cache. When the proto value is passed as the ifaces paramete...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146341)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146341 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in bpfeventoutput We received report 1 of kernel crash, which is caused b...

PT-2026-126708

A security flaw has been discovered in oretnom23 php-travel-agency-system 4e28b8f84d72420373dd15c3ae32900beb7e0635. Impacted is an unknown function of the file traceapplication.php. The manipulation of the argument Search results in sql injection. It is possible to launch the attack remotely. The...

PT-2026-127184

A weakness has been identified in oretnom23 php-travel-agency-system. The affected element is an unknown function of the file contact insert.php of the component Contact Form Handler. This manipulation of the argument name/company/email/topic/phone/comments causes sql injection. The attack can be...