CVE-2026-72577: Missing Authentication for Critical Function

Multiple vulnerabilities in NASA fprime-gds through 3.4.3 allow an unauthenticated remote attacker to achieve arbitrary code execution on the ground station host and inject arbitrary commands to connected spacecraft. The Flask application in src/fprimegds/flask/app.py applies no authentication to...

CVE-2026-71968: Use After Free

OP-TEE OS through 4.10.0, fixed in commit 8794043, contains a use-after-free vulnerability in the Trusted Application loader that allows attackers with the ability to load a signed Trusted Application to corrupt secure-world kernel memory by setting the TAFLAGCONCURRENT flag in a user TA signed...

PT-2026-69969

Name of the Vulnerable Software and Affected Versions shim application affected versions not specified Description A NULL pointer vulnerability exists in the dp.c library of the shim application. This issue occurs due to a missing NULL pointer check, which could allow an attacker to cause a denia...

CVE-2026-19411: NULL Pointer Dereference

A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of service attack on a system that uses shim application for UEFI bootloader...

Metabase SQL Injection

The vulnerability of the application software interface for password reset, data visualization, and report creation in the Metabase tool is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries...

What SecureIQLab Cloud WAAP 5.0 means for your application security

You cannot verify a vendor’s security claims from their own datasheet, including ours. That is why independent validation matters. In our recent guide to the best WAAP solutions Best WAAP Solutions 2026: Enterprise Buyer Guide, we argued that every serious shortlist should include independent...

Exploit for CVE-2026-64638

CVE-2026-64638 — XSS2Shell WordPress Pre-Auth Reflected XSS...

Exploit for CVE-2026-64638

💥 CVE‑2026‑64638 – WordPress XSS2Shell S...

CVE-2026-16594

The WP Directory Kit WordPress plugin, in versions before 1.5.5 , is vulnerable to a sensitive information disclosure flaw. The plugin fails to perform adequate authorization or nonce checks on one of its authenticated AJAX actions. This security oversight allows any authenticated user, such as a...

EUVD-2026-54730

The Newsletters WordPress plugin before 4.16 does not strictly compare its API authentication key, allowing unauthenticated attackers to bypass the API authentication via type juggling and perform privileged actions such as modifying subscriber records and sending emails, when the optional API ha...

FIASSE v1.1

A Framework for Integrating Application Security into Software Engineering FIASSE Note: This repository is an ongoing work. Contributions are welcome! Overview TL;DR: please read the DOC. Explore FIASSE website. Visit GitHub Discussions to contribute. This repository contains resources and...

CVE-2026-11425

Domoticz versions prior to 2026.3 contains a stored cross-site scripting vulnerability in the mobile dashboard that allows authenticated attackers to inject arbitrary HTML and JavaScript by updating Text or Alert subtype device values through the API. The mobile dashboard renders device data via...

CVE-2026-11425

Domoticz Mobile Dashboard (versions before 2026.3) is affected by a stored XSS via Text/Alert device rendering. An authenticated attacker can update Text or Alert device values through the API to inject HTML/JavaScript, which is then rendered by ng-bind-html without proper escaping. This can exec...

Imperva Customers Protected Against Novel HTTP Desync Attacks

TL;DR: Recent Portswigger research introduced novel HTTP desync techniques discovered through an AI-assisted research system called the HTTP Terminator. The findings expand the range of unusual HTTP behaviors that can cause front-end and back-end systems to interpret the same traffic differently...

CVE-2026-47361

In versions of the Datadog Android application prior to v541-5.9.2, BubbleChatActivity is exported with no permission guard and accepts a SEND intent with a caller-supplied conversationid. When the activity closes and no in-process session matches that ID, it unconditionally cancels notification ...

EUVD-2026-54566

In versions of the Datadog Android application prior to v554-5.9.4, two Room-backed SQLite databases store sensitive content in plaintext: LocalNotificationDatabase notification title, message, recipient, service, tags, and on-call/incident deep links and SearchRecentDatabase the user's full in-a...

Exploit for CVE-2026-64638

XSS2Shell — PoC de CVE-2026-64638 Proof of Concept educativ...

Security Bulletin: There is a vulnerability in freemarker-2.3.22.jar used by IBM Maximo Manage application in IBM Maximo Application Suite.

Summary There is a vulnerability in freemarker-2.3.22.jar used by IBM Maximo Manage application in IBM Maximo Application Suite. Vulnerability Details ID:WS-2020-0455 DESCRIPTION: Affected versions of this package are vulnerable to Server-side Template Injection SSTI. By allowing user input into...

CVE-2026-19206

CVE-2026-19206 affects MZ Automation libiec61850 up to 1.6.1 , specifically the SVReceiver_stopThreadless function in the ASDU Element Handler (src/sampled_values/sv_subscriber.c). The issue is a heap-based buffer overflow caused by manipulation of the code path, with a local attack vector and a ...

CVE-2026-54213 TeamDavid: Denial of Service via endpoint 'internalRestart'

Tobit Laboratories AG TeamDavid's Webbox application exposes a functionality that allows the server to be shut down when a specific endpoint /internalRestart is accessed. This endpoint is accessible to unauthenticated users over the public Internet. Instead of “restarting”, the server shuts...