PT-2026-110450

Name of the Vulnerable Software and Affected Versions libsamsungtts.so versions prior to SMR Oct-2026 Release 1 Description An out-of-bounds write exists in the libsamsungtts.so library, which allows local attackers to execute arbitrary code. An out-of-bounds write occurs when a program writes da...

PT-2026-110453

Name of the Vulnerable Software and Affected Versions libsimba.heifdec.media.samsung.so versions prior to SMR Oct-2026 Release 1 Description Improper input validation occurs during the parsing of sheifd, which may allow a local attacker to execute arbitrary code. Recommendations Update...

PT-2026-110456

Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch arbitrary activity with Samsung Checkout privileges...

PT-2026-110459

Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow privileges on the connected device...

PT-2026-110455

Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive data...

PT-2026-110494

Name of the Vulnerable Software and Affected Versions tsi-coop tsi-dpdp-cms versions 0.5.0 through 0.5.2 Description A flaw in the JSON Schema Validation component allows remote information disclosure. This occurs through the manipulation of the func argument. Recommendations Upgrade tsi-coop...

PT-2026-110481

A vulnerability was found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This affects the function mysql query of the file source/adminregister.php of the component Registration Handler. Performing a manipulation results in sql injection. The attack may be...

PT-2026-110636

A vulnerability has been found in Netcore NR268 1.7.121109. This affects the function filter arp put file cgi of the file /router/filter arp put file.cgi. The manipulation of the argument put file leads to out-of-bounds read. It is possible to initiate the attack remotely. The exploit has been...

PT-2026-110634

Name of the Vulnerable Software and Affected Versions Exponent CMS versions prior to 3.0.2patch3 Description An issue exists in the XML-RPC component within the userLogin function of the xmlrpc.php file. This flaw allows a remote attacker to perform SQL injection, which is a technique used to...

PT-2026-110511

Name of the Vulnerable Software and Affected Versions agno-agi agno versions prior to 3.0.7 Description Remote code injection is possible within the PythonTools component in the file python.py. The issue occurs when the code argument passed to the run python code function is manipulated, allowing...

PT-2026-110537

A vulnerability was found in Zen Cart up to 2.2.2. This impacts the function zen db perform in the library includes/modules/payment/paypaldp.php of the component PayPal IPN Handler. Performing a manipulation of the argument txn id results in sql injection. The attack can be initiated remotely. Th...

PT-2026-110525

A security vulnerability has been detected in Tencent WeKnora up to 0.8.1. Impacted is the function validateSubquery of the file internal/utils/inject.go of the component SQL Validator. The manipulation leads to sql injection. The attack is possible to be carried out remotely. The exploit has bee...

PT-2026-110543

Name of the Vulnerable Software and Affected Versions meetecho janus-gateway versions prior to 1.4.3 Description A race condition exists within the VideoRoom component, specifically affecting the src/plugins/janus videoroom.c file. This flaw allows for remote exploitation, although the attack...

PT-2026-110542

Name of the Vulnerable Software and Affected Versions Zen Cart versions prior to 2.2.2 Description A security flaw exists in the Module Configuration component within the admin/modules.php file. Remote attackers can perform SQL injection, a technique used to manipulate database queries, by...

PT-2026-110540

A vulnerability was identified in Zen Cart 2.2.2. Affected by this vulnerability is the function eval of the file admin/configuration.php of the component Admin Panel. The manipulation of the argument gID leads to sql injection. The attack may be initiated remotely. The attack is considered to ha...

PT-2026-110554

Name of the Vulnerable Software and Affected Versions Yungengxin Cloud Billing version 2024.11.28.11 Description A flaw exists in the IOCTL Process Termination component within the LWBilling64.sys library. Specifically, the sub 14000443C function is susceptible to manipulation of the Pid argument...

PT-2026-110649

Name of the Vulnerable Software and Affected Versions MarkLogic Server versions 11.0.0 through 11.3.6 MarkLogic Server versions 12.0.0 through 12.0.x Description Improper privilege management allows a remote authenticated attacker with delegated database-administrator privileges to perform backup...

PT-2026-110643

Name of the Vulnerable Software and Affected Versions Progress MarkLogic Server versions prior to 12.1.0 Progress MarkLogic Server versions prior to 11.3.7 Description An authorization flaw exists that allows a remote attacker with administrative privileges to access authentication material...

Important: sudo

Issue Overview: A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a...

Important: rpcbind

Issue Overview: A stack-based buffer overflow was found in rpcbind's rpcinfo utility. When querying a remote rpcbind service with rpcinfo -l, address information returned by the server is copied into a fixed-size buffer without sufficient bounds checking. A malicious or compromised rpcbind server...