PT-2026-112632

Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description A heap-based buffer overflow exists in Windows Push Notifications. This issue allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occu...

Microsoft Windows: CVE-2026-96313: Windows Push Notifications Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

PT-2026-111326

Name of the Vulnerable Software and Affected Versions AdithyaYelloju Restaurant-Management-System versions up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c Description An issue exists in the Password Reset component within the file 'User/forgot3.php'. Remote attackers can perform SQL injection, a...

Microsoft Windows: CVE-2026-69952: Windows Overlay Filter Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

PT-2026-112234

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A heap-based buffer overflow occurs in the Windows Kernel, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue...

CVE-2026-70017: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally...

EUVD-2026-98807

Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via the jsmn.h, jsmnparse, example/jsondump.c, dump components...

PT-2026-111414

Name of the Vulnerable Software and Affected Versions conductor-oss conductor version 3.31.2 Description An issue exists in the API Tool Configuration component within the ListApiToolsTask.start function of the ListApiToolsTask.java file. Remote manipulation of the specUrl argument allows for...

PT-2026-111372

A vulnerability was identified in wbond certvalidator up to 0.11.1. This issue affects some unknown processing of the component Certificate Path Builder. Such manipulation leads to resource consumption. The attack can be launched remotely. The vendor was contacted early about this disclosure but...

PT-2026-111408

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-432BRP version 3.10B20 Description A stack-based buffer overflow occurs when manipulating the Name argument within the formTcpipSetup function located in the /goform/formTcpipSetup file. This issue allows a remote attacker to...

PT-2026-111405

Name of the Vulnerable Software and Affected Versions MosaicML Composer versions prior to 0.32.2 Description A path traversal issue exists in the Checkpoint Extraction component within the tarball.extractall function of the composer/utils/checkpoint.py file. This flaw allows a remote attacker to...

PT-2026-111584

A flaw has been found in Colorful iGameCenter 2.0.0.82. Affected by this vulnerability is the function MmMapIoSpace in the library AMDRyzenMasterDriver.sys of the component Dispatch Handler. This manipulation of the argument SystemBuffer causes privilege defined with unsafe actions. The attack...

PT-2026-111379

Name of the Vulnerable Software and Affected Versions SIMATIC WinCC versions 7.5 SIMATIC WinCC versions prior to 8.0 Update 11 SIMATIC WinCC versions prior to 8.1 Update 7 Description The application does not sufficiently restrict permissions assigned to a database role. This flaw allows an...

PT-2026-111388

A vulnerability has been identified in SIMATIC IPC BX-21A All versions V31.01.13, SIMATIC IPC RW-543A All versions V1.1.4, SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G All versions V28.01.15. A BIOS vendor test key is present in the UEFI Secure Boot key database. This could allow a...

PT-2026-111525

A flaw has been found in HBAI-Ltd Toonflow-app up to 1.1.8. The affected element is the function child process.exec of the file src/routes/setting/fileManagement/openFolder.ts of the component Open Folder Endpoint. Executing a manipulation of the argument path can lead to command injection. The...

PT-2026-111311

Name of the Vulnerable Software and Affected Versions Wavlink WL-WN592AX6 version 250422 Description A flaw in the wmapd Daemon allows for remote OS command injection. The issue resides within the system function, enabling an attacker to execute arbitrary operating system commands without...

PT-2026-111327

Name of the Vulnerable Software and Affected Versions AdithyaYelloju Restaurant-Management-System affected versions not specified Description An authorization bypass exists in the Order Management component. A remote attacker can manipulate the ID argument within the mysqli query function to bypa...

PT-2026-111312

A vulnerability has been found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This vulnerability affects unknown code of the file User/login.php of the component Login Form. Such manipulation of the argument email/passwd leads to improper...

PT-2026-111657

Name of the Vulnerable Software and Affected Versions HBAI-Ltd Toonflow-app versions prior to 2.0.0 Description A flaw in the exportData endpoint allows for information disclosure. This issue requires local access to be exploited. Recommendations Upgrade to version 2.0.0 or later...

PT-2026-111418

A low privileged remote attacker is able to view a list of roles that should only be accessible to administrators. This results in a low level of confidentiality breach, as no particularly sensitive information is affected...