Atlassian Confluence 7.2.x < 9.2.26 / 9.3.x < 10.2.19 / 11.0.0 (CONFSERVER-104507)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-104507 advisory. - Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a longer...

PT-2026-118856

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Improper access control in DevTools allows a remote attacker to potentially leak sensitive information through the use of a crafted HTML page. Recommendations Update Google Chrome to...

PT-2026-118994

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Improper access control in Ozone allows a remote attacker to leak sensitive information through the use of a crafted HTML page. Recommendations Update to version 156.0.8078.47 or later...

PT-2026-118826

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Improper access control in Extensions allows a remote attacker to potentially leak sensitive information through the use of a crafted HTML page. Recommendations Update Google Chrome to...

Plex Media Server External Control of File Name or Path Vulnerability

Plex Media Server contains an external control of file name or path vulnerability which can allow an admin user to write arbitrary files that may be executed on load. This vulnerability can be chained with CVE-2026-96652, CVE-2026-96654, and CVE-2026-96655...

Oracle Product Hub security vulnerabilities

Oracle Product Hub versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to take control of Oracle Product Hub through HTTP network access...

Linux ipset Hash Generation Data Compromise

The vulnerability of the net/netfilter/ipset/ipsethashgen.h component of the Linux operating system’s kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibilit...

PT-2026-119992

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Control versions 12.2.1.4.0 Oracle Fusion Middleware Control versions 14.1.2.0.0 Description An issue in the Framework component of Oracle Fusion Middleware Control allows an attacker with physical access to compromise...

PT-2026-118417

Missing Authorization vulnerability in eLightUp Meta Box – WordPress Custom Fields Framework meta-box allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Meta Box – WordPress Custom Fields Framework: from n/a through 5.15.2...

PT-2026-118439

A ThreadX module allocates the control blocks of its kernel objects from the Module Manager's object pool, and can ask for that memory back by address with txm module object deallocate. The manager released it whatever was in it, including a control block the kernel was still using. Deallocation ...

MAS-Guard: Unified Guardrails from Individual Agents to Multi-Agent LLM Systems

Agentic AI extends large language models LLMs from generating responses to planning and executing complex workflows, substantially expanding their utility while exposing applications to unsafe actions, information leakage, and adversarial manipulation. Multi-agent systems further expand these...

SPECTER: Covert Data Exfiltration from Air-Gapped Systems Via USB Power Modulation

We present SPECTER, a post-compromise covert channel that uses host-side USB power control to exfiltrate information from air-gapped and network-segregated systems. A transmitter with administrative privileges encodes bits through USB power-management or device-state operations without placing th...

Google Chrome Vulnerability: CVE-2026-113129

Improper access control in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

Apple iOS Security Vulnerabilities

Versions of Apple’s operating systems prior to iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27 contain security vulnerabilities. These vulnerabilities stem from access control issues, which may allow applications to access sensitive user data...

Oracle Cost Management security vulnerabilities

Oracle Cost Management versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Cost Planning component, and they could allow low-privilege attackers to take control of Oracle Cost Management through HTTP network access...

Oracle Shipping Execution security vulnerability

Oracle Shipping Execution versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Workflow Events component, which may allow unauthenticated attackers to gain control of Oracle Shipping Execution through HTTP network access...

Oracle Business Process Management Suite security vulnerabilities

Oracle Business Process Management Suite 12.2.1.4.0 and 14.1.2.0.0 versions have security vulnerabilities. These vulnerabilities stem from issues with the BPM Composer component, which may allow attackers with low privileges to gain control of the Oracle Business Process Management Suite through...

Oracle Product Hub security vulnerabilities

Oracle Product Hub versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to take control of Oracle Product Hub through HTTP network access...

Oracle Product Hub security vulnerability

A security vulnerability exists in Oracle Product Hub versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow low-privilege attackers to gain control of Oracle Product Hub via HTTP network access...

PT-2026-119408

Name of the Vulnerable Software and Affected Versions Oracle Primavera Unifier versions 23.12.0 through 23.12.16 Description A flaw in the Project Control component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to unauthorized read access to...