PT-2026-6776

Name of the Vulnerable Software and Affected Versions Lute versions prior to 1.7.7 Description Lute, a structured Markdown engine supporting Go and JavaScript, contains a Stored Cross-Site Scripting XSS issue in its Markdown rendering engine. An attacker can inject malicious JavaScript into...

PT-2026-6713

Name of the Vulnerable Software and Affected Versions versions prior to 2026-24927 Description An out-of-bounds access issue exists in the frequency modulation module. Successful exploitation could impact system availability. Recommendations At the moment, there is no information about a newer...

PT-2026-6704

Name of the Vulnerable Software and Affected Versions versions prior to 2026 affected versions not specified Description A use-after-free UAF concurrency vulnerability exists within the graphics module. Successful exploitation of this issue may impact system availability. Recommendations At the...

NanoCMS 安全漏洞

NanoCMS is a lightweight content management system developed by kalyan02. Versions of NanoCMS prior to 0.4 contained security vulnerabilities, which were caused by incorrect handling of the file/data/pagesdata.txt, potentially leading to direct requests...

libfastcommon 安全漏洞

libfastcommon is a C language code library developed by YuQing personally. Versions of libfastcommon prior to 1.0.84 contained security vulnerabilities. These vulnerabilities stemmed from incorrect operations on the base64decode function in the src/base64.c file, which could lead to stack-based...

Gogs 安全漏洞

Gogs Go Git Service is a Go-based self-service Git hosting service developed by the Gogs team. It supports creating and migrating public/private repositories, as well as adding and removing repository collaborators. Gogs versions 0.13.3 and earlier have security vulnerabilities. These...

CVE-2026-22801 affecting package libpng for versions less than 1.6.54-1

CVE-2026-22801 affecting package libpng for versions less than 1.6.54-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-0672 affecting package python3 for versions less than 3.9.19-18

CVE-2026-0672 affecting package python3 for versions less than 3.9.19-18. A patched version of the package is available...

CVE-2025-15444 affecting package libsodium for versions less than 1.0.18-7

CVE-2025-15444 affecting package libsodium for versions less than 1.0.18-7. A patched version of the package is available...

CVE-2025-58160 affecting package rpm-ostree for versions less than 2022.1-8

CVE-2025-58160 affecting package rpm-ostree for versions less than 2022.1-8. A patched version of the package is available...

CVE-2025-61107 affecting package frr for versions less than 8.5.5-5

CVE-2025-61107 affecting package frr for versions less than 8.5.5-5. A patched version of the package is available...

CVE-2026-22044

GLPI is a free asset and IT management software package. From version 0.85 to before 10.0.23, an authenticated user can perform a SQL injection. This issue has been patched in version 10.0.23...

CVE-2026-25115

n8n is an open source workflow automation platform. Prior to version 2.4.8, a vulnerability in the Python Code node allows authenticated users to break out of the Python sandbox environment and execute code outside the intended security boundary. This issue has been patched in version 2.4.8...

CVE-2026-1301

In builds with PubSub and JSON enabled, a crafted JSON message can cause the decoder to write beyond a heap-allocated array before authentication, reliably crashing the process and corrupting memory...

CVE-2025-15328

Tanium addressed an improper link resolution before file access vulnerability in Enforce...

CVE-2026-1301

In builds with PubSub and JSON enabled, a crafted JSON message can cause the decoder to write beyond a heap-allocated array before authentication, reliably crashing the process and corrupting memory...

EUVD-2026-5530

In builds with PubSub and JSON enabled, a crafted JSON message can cause the decoder to write beyond a heap-allocated array before authentication, reliably crashing the process and corrupting memory...

CVE-2025-15328 Tanium addressed an improper link resolution before file access vulnerability in Enforce.

Tanium addressed an improper link resolution before file access vulnerability in Enforce...

EUVD-2025-206835

Tanium addressed an improper link resolution before file access vulnerability in Enforce...

CVE-2025-15328

CVE-2025-15328 describes an improper link resolution before file access in Tanium Enforce. Documents indicate Tanium addressed the issue, but provide no explicit affected versions, patch version, or detailed root cause beyond the general flaw. The PT-Security entry warns of potential unauthorized...