CVE-2026-52021

100xdevs CMS v1.0 (by code100xDevs) contains an information disclosure vulnerability in the src/middleware.ts and src/app/api/mobile/search/route.ts components, allowing a remote, unauthenticated attacker to obtain sensitive information with no user interaction required. The vulnerability is rate...

PT-2026-79176

Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A local attacker can cause a denial of service resulting from a NULL pointer dereference, which occurs when the software attempts to read or write to a memory...

PT-2026-79229

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A stack buffer overflow allows a remote attacker to execute arbitrary code. A stack buffer overflow occurs when a program writes more data to a buffer located on the stack...

PT-2026-79077

Mongoose is an embedded web server and network library. Prior to version 7.22, an on-path network attacker with a wildcard certificate for a parent domain can impersonate deeper subdomains to a client using the built-in TLS stack. The mg tls verify cert san and mg tls verify cert cn functions in...

PT-2026-79161

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A heap-based buffer overflow allows a local authenticated attacker to execute arbitrary code. A heap-based buffer overflow occurs when a program writes more data to a heap...

PT-2026-79237

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A local attacker can cause a denial of service through an out-of-bounds write, which occurs when data is written outside the intended memory boundary of a buffer...

PT-2026-79245

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A local attacker can cause a denial of service by triggering uncontrolled resource consumption during the parsing of directory records. Recommendations At the moment, there ...

PT-2026-79230

Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description An integer overflow allows a remote attacker to cause a denial of service. An integer overflow occurs when an arithmetic operation attempts to create a numeric...

PT-2026-79233

Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A remote attacker could cause a denial of service due to a NULL pointer dereference, which occurs when a program attempts to read or write to a memory address tha...

Linux Distros Unpatched Vulnerability : CVE-2026-71139

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable...

The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the lack of measures taken to neutralize special elements in the output data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

TrueConf Server Code Injection Vulnerability

TrueConf Server contains a code injection vulnerability that could allow an unauthorized remote attacker with network access via port 4307/TCP to use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system...

Linux Distros Unpatched Vulnerability : CVE-2026-71127

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable...

CVE-2026-63123

Tina is a headless content management system. Prior to 2.5.2, the TinaCMS CLI package's Vite dev server packages/@tinacms/cli/src/next/vite/cors.ts origin callback returns false for a disallowed origin but does not reject the request, and packages/@tinacms/cli/src/next/vite/plugins.ts still route...

CVE-2026-63123

In TinaCMS CLI before 2.5.2, the Vite dev server CORS handler returns false for disallowed origins without rejecting the request, allowing cross-origin POST /media/upload/* to write attacker-controlled files into the dev server's media root. A remote attacker exploits this by luring a developer t...

CVE-2026-18544

IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references...

CVE-2026-14514

IBM Reliable Scalable Cluster Technology RSCT 3.0 could allow a remote attacker to cause a denial of service by sending a specially crafted request due improper input validation...

CVE-2026-14978 Unicode normalization mismatch in go-slug ignore pattern matching may bypass intended file exclusions

HashiCorp go-slug 0.4.0 through 0.18.2 could allow a local attacker to bypass .terraformignore exclusions and cause sensitive files to be included in Terraform slug uploads due to improper handling of Unicode normalization during path matching...

CVE-2026-14514

IBM Reliable Scalable Cluster Technology (RSCT) 3.x contains a denial-of-service vulnerability in the RMC daemon . The root cause is improper input validation (CWE-770: Allocation of Resources Without Limits or Throttling) when handling malformed packets during an RMCAPI session establishment . A...

CVE-2026-75596 Netty: Fragmented ClientHello records trigger quadratic pre-handshake reassembly in default SNI parsing

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, the default io.netty.handler.ssl.SniHandler constructors use the pre-handshake ClientHello aggregation path in handler/src/main/java/io/netty/handler/ssl/SslClientHelloHandler.java at...