CVE-2026-19477

A stack-based buffer overflow was identified in MCC Universal Library for Linux (uldaq) , a library used for MCC data acquisition on Linux, affecting version 1.2.1 and prior . The flaw can lead to information disclosure or arbitrary code execution with a local attack vector, low complexity, and n...

August 2026 Security Advisory Ivanti Neurons for MDM

August 2026 Security Advisory Ivanti Neurons for MDM Summary Ivanti has released updates for Ivanti Neurons for MDM which addresses one medium vulnerability. We are not aware of any customers being exploited by this vulnerability at the time of disclosure. Vulnerability Details: Description | CVS...

CVE-2026-40082: Session Fixation

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have missing sessionregenerateid after login, leading to Session Fixation. sessionregenerateid is NOT called after successful login. The login flow at authlogin.php:203-207 directly sets $SESSIONSESSUSER...

CVE-2026-35474: URL Redirection to Untrusted Site

WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, open redirect has been found in WeGIA webapp. The redirect parameter is taken directly from $GET with no URL validation or whitelist check, then used verbatim in a header"Location: ..." call. This vulnerability is fixed in 3.6.9...

SUSE CVE-2021-2007

Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise...

PT-2026-2254

Name of the Vulnerable Software and Affected Versions HAX CMS versions 11.0.6 through 24.x HAX CMS versions prior to 25.0.0 Description HAX CMS, which manages microsite universes with PHP or NodeJs backends, is subject to a stored cross-site scripting XSS issue. This flaw potentially allows for...

PT-2025-49118

There is a relative path traversal vulnerability in the NI System Web Server that may result in information disclosure. Successful exploitation requires an attacker to send a specially crafted request to the NI System Web Server, allowing the attacker to read arbitrary files. This vulnerability...

EUVD-2020-7691

Malware in sbrugna...

EUVD-2020-6639

Malware in sbrugna...

EUVD-2021-16479

Malware in sbrugna...

EUVD-2017-14740

Malware in sbrugna...

EUVD-2021-22173

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2018-3070

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Client mysqldump. Supported versions that are affected are 5.5.60 and prior, 5.6.40 an...

Linux Distros Unpatched Vulnerability : CVE-2025-21521

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Thread Pooling. Supported versions that are affected are 8.0.39 and prior, 8.4.2 an...

PT-2025-13416 · Dell · Dell Unity

Name of the Vulnerable Software and Affected Versions: Dell Unity versions 5.4 and prior Description: The issue is related to an Improper Neutralization of Special Elements used in an OS Command, also known as 'OS Command Injection'. This could allow a low-privileged attacker with local access to...

CVE-2024-12741: Deserialization of Untrusted Data

A deserialization of untrusted data vulnerability exists in NI DAQExpress that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted project file. This vulnerability affects DAQExpress 5.1 and prior versions. Please note that...

DuckDB < 1.1.0 Unauthorized Filesystem Read (CVE-2024-41672)

The version of DuckDB installed on the remote host is affected by a vulnerability as referenced in the CVE-2024-41672 advisory. - In versions 1.0.0 and prior, content in filesystem is accessible for reading using 'sniffcsv', even with 'enableexternalaccess=false'. This vulnerability provides an...

CVE-2020-26309: Inefficient Regular Expression Complexity

Validate.js provides a declarative way of validating javascript objects. Versions 0.11.3 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, it is unknown if any patches are available...

CVE-2020-26304: Inefficient Regular Expression Complexity

Foundation is a front-end framework. Versions 6.3.3 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, it is unknown if any fixes are available...

AZL-50460 CVE-2024-21196 affecting package mysql for versions less than 8.0.40-1

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: X Plugin. Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...