CVE-2026-59561

Sakura Editor provided by Sakura Editor Development Community contains an OS command injection vulnerability. If a victim user is directed to edit a file in a crafted directory, arbitrary OS command may be executed on the user's PC when the user invokes "Open Terminal"...

CVE-2026-59561

Sakura Editor provided by Sakura Editor Development Community contains an OS command injection vulnerability. If a victim user is directed to edit a file in a crafted directory, arbitrary OS command may be executed on the user's PC when the user invokes "Open Terminal"...

CVE-2026-59561

Sakura Editor provided by Sakura Editor Development Community contains an OS command injection vulnerability. If a victim user is directed to edit a file in a crafted directory, arbitrary OS command may be executed on the user's PC when the user invokes "Open Terminal"...

CVE-2026-78211

4MOSAn GCB Doctor by 4MOSAn Security Technology suffers from an OS Command Injection vulnerability caused by an unremoved ADOdb test page parameter . Unauthenticated remote attackers can exploit this to execute arbitrary system commands on the server, resulting in high impact across confidentiali...

CVE-2026-78211 4MOSAn Security Technology｜4MOSAn GCB Doctor - OS Command Injection

4MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremoved ADOdb test page parameter, thereby executing arbitrary system commands on the server...

PT-2026-80971

Name of the Vulnerable Software and Affected Versions DrayTek VigorSwitch affected versions not specified Description A buffer overflow occurs in the poe schedule profile function. This issue arises from the repeated concatenation of the start date, start time, duration time, how often, weekdays,...

PT-2026-80946

Name of the Vulnerable Software and Affected Versions DrayTek VigorAP affected versions not specified Description A buffer overflow exists in the apautotest function. The issue stems from missing length checks during memory copy operations involving the CMD6 field. A remote attacker with valid...

PT-2026-80969

Name of the Vulnerable Software and Affected Versions DrayTek VigorSwitch affected versions not specified Description A buffer overflow exists in the webBackupAction function. This issue occurs due to repeated string concatenation of the pathN, valueN, key, and option fields into fixed-size stack...

PT-2026-79818

Name of the Vulnerable Software and Affected Versions 4MOSAn GCB Doctor affected versions not specified Description An OS Command Injection issue exists where unauthenticated remote attackers can execute arbitrary system commands on the server. This is possible through a parameter in an unremoved...

PT-2026-80968

Name of the Vulnerable Software and Affected Versions DrayTek VigorSwitch affected versions not specified Description A buffer overflow exists in the pingtrace function. This issue occurs due to missing length checks when the host, count, and interval fields are concatenated into a fixed-size...

CVE-2026-76836: Improper Control of Generation of Code

AzuraCast exposes the Liquidsoap custom configuration fields through an endpoint that does not require the permission guarding them. The backendconfig property in backend/src/Entity/Station.php is annotated with GROUPGENERAL, and PUT /api/station/stationid/profile/edit in...

phpMyFAQ Arbitrary Command Execution Information Disclosure

The vulnerability of the src/phpMyFAQ/Glossary/GlossaryRepository.php file in the phpMyFAQ web application is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands and disclose protected...

CVE-2026-30512

A local privilege escalation vulnerability exists in the Restricted Access Kiosk Mode implementation of Scheidt & Bachmann entervo HMI prior to V2 R5 P0 M5. The vulnerability affects the external PDF viewer functionality used to display the application manual and its interaction with the underlyi...

CVE-2026-71939: Buffer Copy without Checking Size of Input

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the aclgeneralsetup Add ACE function. The vulnerability is caused by copying the name field into a fixed-size buffer without length validation. A remote attacker can trigger this vulnerability via crafted input, causin...

CVE-2025-63080: Incorrect Authorization

Firmware in KAON PG5298A and PG5298B routers allow an authenticated user to send crafted JSON-RPC requests and perform operations not possible via GUI, e.g. system file read or command execution. This vulnerability has been fixed in firmware version: 3.0.82 for PG5298A and 4.0.82 for PG5298B...

PT-2026-79825

Sakura Editor provided by Sakura Editor Development Community contains an OS command injection vulnerability. If a victim user is directed to edit a file in a crafted directory, arbitrary OS command may be executed on the user's PC when the user invokes "Open Terminal"...

PT-2026-80974

Name of the Vulnerable Software and Affected Versions DrayTek VigorSwitch affected versions not specified Description A buffer overflow occurs in the acl general setup Edit ACE function when the name field is copied into a fixed-size buffer without proper length validation. A remote attacker with...

PT-2026-80970

Name of the Vulnerable Software and Affected Versions DrayTek VigorSwitch affected versions not specified Description A buffer overflow occurs in the sysreboot function due to the unsafe concatenation of split valueN data into a fixed-size buffer. A remote attacker with valid administrative...

CVE-2026-71941: Buffer Copy without Checking Size of Input

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the diaglogmail function. The vulnerability is caused by concatenating multiple smtpReceiver email addresses into a fixed-size buffer without checking the remaining buffer size. A remote attacker can trigger this...

PT-2026-80945

Name of the Vulnerable Software and Affected Versions DrayTek VigorAP affected versions not specified Description A buffer overflow exists in the setLan function due to missing length checks during memory copy operations. This issue affects the lanVlanId0, lanIp, and lanNetmask fields. A remote...