PT-2026-7685

SpotDialup 1.6.7 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Name' field to trigger an application crash...

Multi Layer Protection against Low Rate DDoS Attacks in Containerized Systems

Low rate Distributed Denial of Service DDoS attacks have emerged as a major threat to containerized cloud infrastructures. Due to their low traffic volumes, these attacks can be difficult to detect and mitigate, potentially causing serious harm to internet applications. This work proposes a DDoS...

Huawei EMUI and Huawei HarmonyOS AMS Module Privilege Control Class Vulnerability

Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is an operating system. Provides a full-scene distributed operating system based on a microkernel. A privilege control type vulnerability exists in the Huawei EMUI and Huawei HarmonyOS AMS module, which can be...

CVE-2025-65127

Affects Shenzhen Zhibotong Electronics ZBT WE2001 (version 23.09.27). The web API component lacks session validation, enabling remote unauthenticated access to administrative information-retrieval functions via get_* calls. Attackers can retrieve device configuration data, including plaintext cre...

PT-2026-7708

Name of the Vulnerable Software and Affected Versions SpotIE version 2.9.5 Description A denial of service issue exists in the registration key input. An attacker can cause the application to crash by pasting a 1000-character buffer payload into the Key field. Recommendations At the moment, there...

PT-2026-7713

MSN Password Recovery version 1.30 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized input in the registration code field. Attackers can generate a 9000-byte buffer of repeated characters and paste it into the 'User Name and...

PT-2026-7607

Name of the Vulnerable Software and Affected Versions InoERP version 0.7.2 Description InoERP version 0.7.2 has a persistent cross-site scripting issue in the comment section. Unauthenticated attackers can inject malicious scripts, such as JavaScript payloads, through comments. These scripts...

PT-2026-7701

Office Product Key Finder 1.5.4 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the registration code input. Attackers can create a specially crafted text file and paste it into the 'Name and Key' field to trigger an application crash...

PT-2026-7705

Name of the Vulnerable Software and Affected Versions SpotDialup version 1.6.7 Description A denial of service issue exists in the registration key input field. An attacker can cause the application to crash by pasting a 1000-character buffer payload into the Key field. Recommendations At the...

PT-2026-7692

Backup Key Recovery 2.2.5 contains a denial of service vulnerability that allows attackers to crash the application by supplying an overly long registration key. Attackers can generate a 1000-character payload file and paste it into the registration key field to trigger an application crash...

PT-2026-7693

BlueAuditor 1.7.2.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Name' field to trigger an application crash...

Apple多款产品 安全漏洞

Apple iOS is an operating system developed for mobile devices.Apple macOS is a specialized operating system developed for Mac computers.Apple iPadOS is an operating system for iPad tablets. A security bypass vulnerability exists in multiple Apple products, which is caused by a permissions issue i...

PT-2026-7699

Name of the Vulnerable Software and Affected Versions NetShareWatcher version 1.5.8.0 Description A buffer overflow occurs in the registration name input, which can lead to an application crash. This happens when a payload of 1000 characters is entered into the 'Name' field. Recommendations At th...

PT-2026-7510

Exposure of Sensitive System Information to an Unauthorized Actor vulnerability in Microcom ZeusWeb allows Web Application Fingerprinting of sensitive data. This issue affects ZeusWeb: 6.1.31...

PT-2026-7687

TaskCanvas 1.4.0 contains a denial of service vulnerability in the registration code input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the registration field to trigger an application crash...

PT-2026-7696

Duplicate Cleaner Pro 4.1.3 contains a denial of service vulnerability that allows attackers to crash the application by injecting an oversized buffer into the license key field. Attackers can generate a 6000-byte payload and paste it into the license activation field to trigger an application...

Nsasoft RemShutdown 安全漏洞

Nsasoft RemShutdown is a remote shutdown and management tool developed by the US company Nsasoft. Version 2.9.0.0 of Nsasoft RemShutdown contains a security vulnerability, which stems from a buffer overflow in the Name registration field. This vulnerability may lead to the application crashing...

Nsasoft SpotIM 安全漏洞

Nsasoft SpotIM is a password recovery tool developed by the US company Nsasoft. Version 2.2 of Nsasoft SpotIM contains a security vulnerability; this vulnerability stems from a buffer overflow in the registration name input field, which may cause the application to crash...

Nsasoft RemShutdown 安全漏洞

Nsasoft RemShutdown is a remote shutdown and management tool developed by the US company Nsasoft. Version 2.9.0.0 of Nsasoft RemShutdown contains a security vulnerability; this vulnerability stems from a buffer overflow in the registration key input field, which may lead to the application crashi...

IBM WebSphere Application Server 8.5.5.28 < 8.5.5.30 / 9.0.5.24 < 9.0.5.27 (7260217)

The version of IBM WebSphere Application Server running on the remote host is affected by a vulnerability as referenced in the 7260217 advisory. - IBM WebSphere Application Server 9.0, and 8.5 could provide weaker than expected security during system administration of security settings...