CVE-2026-43794

creationtimestamp| type| source ---|---|--- 2026-08-18 04:46:54+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260818 2026-08-18 08:46:42+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2020...

CVE-2026-28984

creationtimestamp| type| source ---|---|--- 2026-08-18 04:45:21+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260818 2026-08-18 08:45:19+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2020...

CVE-2026-65351

creationtimestamp| type| source ---|---|--- 2026-08-18 04:45:03+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260818 2026-08-18 08:48:41+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2020...

EUVD-2026-60547

An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke script execution...

EUVD-2026-60554

SQL Injection vulnerability in Qcms v.6.0.6 allows a remote attacker to execute arbitrary code...

EUVD-2026-60552

A heap-based out-of-bounds write vulnerability exists in S2OPC 1.7.3 in server-side EventFilter handling during CreateMonitoredItems processing. This allows a remote attacker to execute arbitrary code...

EUVD-2026-60509

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing an image may lead to arbitrary code execution...

PT-2026-77334

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.169 Description A type confusion issue exists in the V8 engine, which is the open-source JavaScript and WebAssembly engine used by the browser. This flaw allows a remote attacker to execute arbitrary...

Broadcom VMware vCenter Path Traversal Vulnerability

Broadcom VMware vCenter contains a path traversal vulnerability which could allow a threat actor with network access to vCenter to execute arbitrary code...

PT-2026-77137

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.64 n8n versions prior to 2.29.8 n8n versions prior to 2.30.1 Description The Git node clone operation allows an authenticated workflow user to replace a validated directory with a symlink before the cloning process...

CVE-2026-30250

Cross-site scripting vulnerability in the user documentation field in Beta Systems Software AG ANOW! Automate v.3.3.1.90 allows a remote attacker to execute arbitrary code...

PT-2026-77325

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.169 Description Type confusion in the V8 engine allows a remote attacker to execute arbitrary code within the sandbox by using a specially crafted HTML page. Type confusion is a logic error where the...

The vulnerability of the standard authentication client of the Data Hub Adapter for the SAP Commerce Cloud platform allows a hacker to execute arbitrary code and cause complete system compromise.

The vulnerability of the standard authentication client for Data Hub Adapters in the SAP Commerce Cloud platform is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code, leading to a complete compromise of the system...

PT-2026-77144

A flaw was found in the governance-policy-addon-controller component of Red Hat Advanced Cluster Management for Kubernetes. A user with permissions to annotate the namespaced ManagedClusterAddOn resource can override the governance-policy container image. This allows an attacker to run a controll...

CVE-2026-67921

Halo CMS (versions up to 2.25.4 ) is affected by a CSRF/CORS misconfiguration in CorsConfigurer.java and CsrfConfigurer.java. The console API does not validate XSRF tokens, the session cookie uses SameSite=None, and CORS reflects any origin with credentials. This enables a browser-based attack ch...

PT-2026-77162

CodeWhale versions before 0.8.64 fail to properly validate the allow shell configuration parameter from project config files, allowing attackers to enable arbitrary shell command execution by committing a malicious .codewhale/config.toml file to a repository. When a user clones and opens the...

PT-2026-77333

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.169 Description A buffer overflow exists in ANGLE, a compatibility layer that allows OpenGL ES APIs to run on non-native platforms. This issue allows a remote attacker who has already...

PT-2026-77322

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.169 Description An inappropriate implementation in the Media component of Google Chrome on Mac allows a remote attacker to execute arbitrary code outside the sandbox. This is achieved by inducing the...

CVE-2026-67920

Halo 2.25.4's MigrationServiceImpl.restoreWorkdir() fetches an arbitrary URL, extracts the zip's workdir/ into the Halo work dir unsanitized via FileSystemUtils.copyRecursively(), replacing the entire extension store and enabling RCE. A working exploit (exploit/migration_restore.py) is verified a...

PT-2026-77324

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.169 Description A link following issue exists in the CredentialProvider component on Windows. This flaw allows a local attacker to potentially execute arbitrary code outside the sandbox by utilizing a...