310749 matches found
CVE-2026-108779
A vulnerability was identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected is the function WmSttInGoodsController.list of the file src/main/java/com/zzjee/wm/controller/WmSttInGoodsController.java. Such manipulation of the argument searchstr leads to sql injection. The attack may be...
PT-2026-110438
Name of the Vulnerable Software and Affected Versions ZKTeco BioTime version 9.5.6 Build 20260130.3206 Description A remote attack can be launched to manipulate unknown processing, resulting in the use of a hard-coded cryptographic key. Recommendations At the moment, there is no information about...
PT-2026-110435
Name of the Vulnerable Software and Affected Versions ZKTeco BioTime version 9.5.6 Build 20260130.3206 Description Improper access controls exist within the System Settings API component. A remote attacker can exploit this by manipulating the '/base/api/systemSettings' endpoint to gain unauthoriz...
PT-2026-110429
Name of the Vulnerable Software and Affected Versions westboy CicadasCMS versions prior to 2431154dac8d0735e04f1fd2a3c3556668fc8dab Description An issue exists in the Template Management component within the TemplateController.input function of the /system/cms/template/input file. Remote...
PT-2026-110430
Name of the Vulnerable Software and Affected Versions ngx cache purge versions prior to 3.0.4 Description An issue exists where file deletion is possible via a symlink attack when nginx and a served application, such as WordPress, operate under the same user account. This occurs because the ngx...
PT-2026-110427
A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipulation leads to enforcement of behavioral workflow. The attack is possible to be carried out remotely. The exploit is publicly...
PT-2026-110422
Name of the Vulnerable Software and Affected Versions deepseek-ai deepseek-harness versions prior to 0.1.1-rc.2 Description A flaw exists in the spawn function of the Sandbox component. Manipulating the Profile argument allows an attacker to cause a sandbox issue, which can be executed on the loc...
PT-2026-110357
A security flaw has been discovered in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this vulnerability is the function WmToMoveGoodsController.list of the file src/main/java/com/zzjee/wm/controller/WmToMoveGoodsController.java of the component PDA Interface. Performing a manipulation of th...
PT-2026-110472
A security vulnerability has been detected in y project RuoYi up to 4.8.3. This impacts the function changeStatus of the file /system/config/add of the component Disable API. The manipulation leads to session expiration. It is possible to initiate the attack remotely. The vendor was contacted ear...
PT-2026-110475
A flaw has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this vulnerability is the function mysql query of the file source/loginprocessing.php of the component Login Handler. This manipulation of the argument email/password causes s...
PT-2026-110452
Name of the Vulnerable Software and Affected Versions libsimba.heifdec.media.samsung.so versions prior to SMR Oct-2026 Release 1 Description Improper input validation occurs when retrieving a cover image within the libsimba.heifdec.media.samsung.so library, which may allow a local attacker to...
PT-2026-110457
Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges...
PT-2026-110444
Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory...
PT-2026-110449
Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs...
PT-2026-110465
Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege...
PT-2026-110447
Name of the Vulnerable Software and Affected Versions lib sag ai sound sep v2.00.so versions prior to SMR Oct-2026 Release 1 Description An out-of-bounds read and write issue exists in the lib sag ai sound sep v2.00.so library. This flaw allows local attackers to read and write memory outside the...
PT-2026-110463
Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information...
PT-2026-110466
Insufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows physical attackers to install arbitrary applications...
PT-2026-110451
Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile in before first unlock...