PT-2026-2340

Name of the Vulnerable Software and Affected Versions Application Server ABAP and ABAP Platform affected versions not specified Description A missing authorization check exists in Application Server ABAP and ABAP Platform. An authenticated attacker can misuse an RFC function to execute form...

SAP NetWeaver Application Server 安全漏洞

SAP NetWeaver Application Server is an application server from SAP, Germany. A security vulnerability exists in SAP NetWeaver Application Server that stems from a lack of authorization checking and could allow an authenticated attacker to misuse RFC functions to execute form routines in the ABAP...

PT-2026-2409

Name of the Vulnerable Software and Affected Versions Cain & Abel version 4.9.56 Description The software contains an unquoted service path, potentially allowing local attackers to execute arbitrary code with elevated privileges. Attackers can exploit the unquoted binary path to inject malicious...

Cain & Abel 代码问题漏洞

Cain & Abel is a password recovery tool from Cain & Abel. A code issue vulnerability exists in Cain & Abel version 4.9.56, which stems from the presence of unquoted service paths that could lead to a local attacker executing arbitrary code with elevated privileges...

Microsoft Windows 信息泄露漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. Microsoft Windows suffers from an information disclosure vulnerability. An attacker could exploit this vulnerability to obtain sensitive information. The following...

MiracleLinux 9 : systemd-252-55.el9_7.7.ML.1 (AXSA:2025-11553:11)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-11553:11 advisory. systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump CVE-2025-4598 Tenable...

PT-2026-2397

Name of the Vulnerable Software and Affected Versions WOW21 version 5.0.1.9 Description The software contains an unquoted service path issue. This allows local attackers to potentially execute arbitrary code with elevated system privileges. Exploitation involves leveraging the unquoted binary pat...

CVE-2025-65784

The Hubert Imoveis e Administracao Ltda Hub v2.0 version 1.27.3 is vulnerable to an issue where insecure permissions allow authenticated attackers with low-level privileges to access other users' information. This access can be gained by sending a specially crafted API request . While the technic...

CVE-2025-65784

Insecure permissions in Hubert Imoveis e Administracao Ltda Hub v2.0 1.27.3 allows authenticated attackers with low-level privileges to access other users' information via a crafted API request...

PT-2026-2385

Name of the Vulnerable Software and Affected Versions Algo 8028 Control Panel version 3.3.3 Description Algo 8028 Control Panel version 3.3.3 has a command injection issue in the fm-data.lua endpoint. Authenticated attackers can execute arbitrary commands by exploiting the insecure source...

PT-2026-2630

Name of the Vulnerable Software and Affected Versions NETGEAR WiFi range extenders affected versions not specified Description An authentication flaw exists in NETGEAR WiFi range extenders. A network attacker with WiFi authentication or physical Ethernet port access can bypass the authentication...

SAP NetWeaver 加密问题漏洞

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform primarily provides a development and runtime environment for SAP applications. SAP NetWeaver is vulnerable to a cryptographic issue that arises from the use of outdated encryption...

PT-2026-2629

Name of the Vulnerable Software and Affected Versions NETGEAR XR1000v2 affected versions not specified Description An insufficient input validation issue exists in the NETGEAR XR1000v2. This allows attackers connected to the router's LAN to execute OS command injections. The issue involves a lack...

PT-2026-2370

Name of the Vulnerable Software and Affected Versions VIAVIWEB Wallpaper Admin version 1.0 Description The software contains an SQL injection issue that allows authenticated attackers to manipulate database queries. Attackers can inject SQL code through the img id parameter. Specifically, sending...

CVE-2026-0855

Certain IP Camera models developed by Merit LILIN has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the device...

CVE-2026-0853

Certain NVR models developed by A-Plus Video Technologies has a Sensitive Data Exposure vulnerability, allowing unauthenticated remote attackers to access the debug page and obtain device status information...

EUVD-2026-1953

Certain NVR models developed by A-Plus Video Technologies has a Sensitive Data Exposure vulnerability, allowing unauthenticated remote attackers to access the debug page and obtain device status information...

The vulnerability of Google Chrome’s browser, related to improper protection of physical external channels, allows attackers to circumvent existing security restrictions.

The vulnerability of Google Chrome relates to improper protection of physical external channels. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions using a specially created HTML page...

PT-2026-2278

Name of the Vulnerable Software and Affected Versions Zen MCP Server versions prior to 9.8.2 Description A path traversal issue exists that allows authenticated attackers to read arbitrary files on the system. The issue is due to flawed logic in the is dangerous path validation function, which us...

EUVD-2026-1917

A path traversal vulnerability exists in Zen MCP Server before 9.8.2 that allows authenticated attackers to read arbitrary files on the system. The vulnerability is caused by flawed logic in the isdangerouspath validation function that uses exact string matching against a blacklist of system...