1325141 matches found
PT-2026-125138
An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2. A remote attacker may be able to cause arbitrary code execution...
PT-2026-125303
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code...
PT-2026-123357
boneIO Black exposes a Node-RED instance without authentication at the /nodered/ path through a Caddy reverse proxy. The Node-RED Admin API allows deploying flows that can execute arbitrary system commands. An unauthenticated attacker on the local network can deploy a malicious flow to achieve...
PT-2026-123187
V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6MemInIF!set temp type default. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product...
PT-2026-125241
A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker may tamper with code-signed applications to execute arbitrary code in the application's context...
PT-2026-125145
A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An unprivileged attacker may be able to execute arbitrary code as root...
Tenda BE3L Pro Form Wifi Basic Set Code Execution
The vulnerability in the formWifiBasicSet function of the Tenda BE3L Pro router software involves buffer overflow when processing the security5g parameter. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary code...
PT-2026-123243
A vulnerability was determined in DedeCMS 5.7.118. This vulnerability affects the function common.inc.php:: RunMagicQuotes of the file plus/ad js.php of the component Advertisement Rendering. Executing a manipulation of the argument aid can lead to code injection. The attack can be executed...
Netgate pfSense Code Execution
The vulnerability in the deletequeue function of the Netgate pfSense software firewall is related to improper handling of special elements. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...
D-Link DCS-6501LH Wi-Fi camera Heap Buffer Overflow DoS
The vulnerability in the mydlinksetrootpwd function of the D-Link DCS-6501LH Wi-Fi camera is related to the use of weak credentials. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...
OpenProject SQL Injection
The vulnerability in the OpenProject project management platform is related to the lack of safeguards for SQL query structures. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary code...
PT-2026-123185
V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds write vulnerability. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product...
EUVD-2026-110021
An issue in HUION Inspiroy Frego S L310 Windows Driver 20.0.1.118 allows a local attacker to execute arbitrary code via the HUION driver installer DLL-loading logic...
PT-2026-123190
V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6ComFile!CCheck::ItemCheck. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product...
Fortinet FortiSandbox: CVE-2026-107656: Improper access control and session management in the web management interface
An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9, FortiSandbox 4.2 all versions, FortiSandbox PaaS 5.0.0 through 5.0.6, FortiSandbox PaaS 4.4 all versions, FortiSandbox PaaS 4.2 all versions ma...
ROS-20261026-73-0088
The vulnerability in openssh relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20261026-73-0166
The vulnerability in openssh relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20261026-73-0143
The vulnerability in openssh is related to insufficient authentication checks. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...
