PT-2026-110357

A security flaw has been discovered in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this vulnerability is the function WmToMoveGoodsController.list of the file src/main/java/com/zzjee/wm/controller/WmToMoveGoodsController.java of the component PDA Interface. Performing a manipulation of th...

PT-2026-110472

A security vulnerability has been detected in y project RuoYi up to 4.8.3. This impacts the function changeStatus of the file /system/config/add of the component Disable API. The manipulation leads to session expiration. It is possible to initiate the attack remotely. The vendor was contacted ear...

PT-2026-110475

A flaw has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this vulnerability is the function mysql query of the file source/loginprocessing.php of the component Login Handler. This manipulation of the argument email/password causes s...

PT-2026-110452

Name of the Vulnerable Software and Affected Versions libsimba.heifdec.media.samsung.so versions prior to SMR Oct-2026 Release 1 Description Improper input validation occurs when retrieving a cover image within the libsimba.heifdec.media.samsung.so library, which may allow a local attacker to...

PT-2026-110457

Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges...

PT-2026-110444

Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory...

PT-2026-110449

Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs...

PT-2026-110465

Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege...

PT-2026-110447

Name of the Vulnerable Software and Affected Versions lib sag ai sound sep v2.00.so versions prior to SMR Oct-2026 Release 1 Description An out-of-bounds read and write issue exists in the lib sag ai sound sep v2.00.so library. This flaw allows local attackers to read and write memory outside the...

PT-2026-110463

Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information...

PT-2026-110451

Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile in before first unlock...

PT-2026-110445

Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information...

PT-2026-110464

Improper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore process...

PT-2026-110461

Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data...

PT-2026-110443

Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory...

PT-2026-110439

A vulnerability was determined in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261. Impacted is the function PublicController::sendFindPwdMail of the file Admin/Home/Controller/PublicController.class.php of the component Password Recovery Mail Endpoint. This manipulation of the argument...

PT-2026-110446

Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage...

PT-2026-110450

Name of the Vulnerable Software and Affected Versions libsamsungtts.so versions prior to SMR Oct-2026 Release 1 Description An out-of-bounds write exists in the libsamsungtts.so library, which allows local attackers to execute arbitrary code. An out-of-bounds write occurs when a program writes da...

PT-2026-110453

Name of the Vulnerable Software and Affected Versions libsimba.heifdec.media.samsung.so versions prior to SMR Oct-2026 Release 1 Description Improper input validation occurs during the parsing of sheifd, which may allow a local attacker to execute arbitrary code. Recommendations Update...

PT-2026-110456

Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch arbitrary activity with Samsung Checkout privileges...