132240 matches found
CVE-2026-36933: Improper Access Control
An issue in Boyleep K11, y108 firmware v.2.3.0.11291 allows a physically proximate attacker to execute arbitrary code via the factory test feature...
PT-2026-49282
Name of the Vulnerable Software and Affected Versions Rakuten Send Anywhere File Transfer for Android version 23.2.9 Description An issue in the application allows untrusted apps without permissions to force arbitrary file downloads into the app's scoped storage. These files then appear in the...
The vulnerability of the Windows Graphics Component, which allows a hacker to execute arbitrary code on Windows operating systems
The vulnerability of the Windows Graphics Component in Windows operating systems is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
CVE-2025-68713
An issue was discovered in Rakuten Send Anywhere File Transfer for Android com.estmob.android.sendanywhere 23.2.9. The vulnerability allows untrusted applications with no permissions to force arbitrary file downloads into the app's scoped storage. The resulting files appear in the application's...
CVE-2026-50880: Improper Control of Generation of Code
An issue in the sendmail transport integration component of YouTransfer v1.0.6 allows attackers to execute arbitrary code via supplying a crafted request...
CVE-2016-20082: Improper Control of Filename for Include/Require Statement in PHP Program
WordPress Plugin Abtest contains a local file inclusion vulnerability that allows unauthenticated attackers to include arbitrary files by manipulating the action parameter. Attackers can send GET requests to abtestadmin.php with malicious action values to include files from the admin directory an...
RHEL 7 : libtiff (RHSA-2026:25910)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:25910 advisory. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: libtiff: Arbitrar...
PT-2026-49220
WordPress Plugin Abtest contains a local file inclusion vulnerability that allows unauthenticated attackers to include arbitrary files by manipulating the action parameter. Attackers can send GET requests to abtest admin.php with malicious action values to include files from the admin directory a...
PT-2026-49321
Name of the Vulnerable Software and Affected Versions YouTransfer version 1.0.6 Description An issue in the sendmail transport integration component allows attackers to execute arbitrary code by supplying a crafted request. Recommendations At the moment, there is no information about a newer...
PT-2026-49309
Discuz! X5.0 releases 20260320 through 20260501 contain a local file inclusion vulnerability that allows authenticated administrators to execute arbitrary code by importing a specially crafted plugin configuration containing path traversal sequences in the directory attribute. Attackers can trigg...
CVE-2026-50880
An issue in the sendmail transport integration component of YouTransfer v1.0.6 allows attackers to execute arbitrary code via supplying a crafted request...
The vulnerability of the isInTrustedDirectory() function in the RunDlg.cpp script of the Notepad++ editor allows a hacker to execute arbitrary code.
The vulnerability of the isInTrustedDirectory function in the RunDlg.cpp script of the Notepad++ text editor is related to the ambiguity of the path handling. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of Adobe InDesign’s computer layout automation tool, related to writing beyond the buffer in memory, allows a hacker to execute arbitrary code.
The vulnerability of Adobe InDesign’s computer layout automation tool is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages, related to the misuse of an unreliable pointer, allows a perpetrator to execute arbitrary code.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the use of an untrusted pointer. Exploiting this vulnerability could allow a attacker to execute arbitrary code...
The vulnerability of the Windows Hyper-V hardware virtualization system allows a perpetrator to execute arbitrary code.
The vulnerability of the Windows Hyper-V hardware virtualization system in Windows operating systems relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of Microsoft Word, Microsoft Office products, Microsoft 365 Apps for Enterprise, SharePoint Enterprise Server, and SharePoint Server relates to the manipulation of pointers, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the use of an untrusted pointer. Exploiting this vulnerability could allow a attacker to execute arbitrary code...
PT-2026-49281
Name of the Vulnerable Software and Affected Versions OpenCPN version 5.12.0 Description A code injection issue exists in the wxExecute function, which allows attackers to execute arbitrary code by embedding shell metacharacters. Shell metacharacters are special characters interpreted by the...
CVE-2026-49954: Improper Control of Filename for Include/Require Statement in PHP Program
Discuz! X5.0 releases 20260320 through 20260610 contain a local file inclusion vulnerability that allows authenticated administrators to execute arbitrary code by importing a specially crafted plugin configuration containing path traversal sequences in the directory attribute. Attackers can trigg...
CVE-2026-11860: Deserialization of Untrusted Data
Quick.CMS deserializes user-controlled data received over plaintext HTTP without ensuring integrity or authenticity. This allows attackers to tamper with serialized payloads in transit and inject malicious objects. Because deserialization is performed without proper validation or class...
PT-2026-69433
Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw exists in the Seattle Filmworks file loader of the GIMP image manipulation program. A remote attacker can trigger a heap overflow—a condition where data exceeds the allocated memory buffe...