EUVD-2026-111077

Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior to version 15.82 allows a local authenticated attacker with low privileges to supply a signed executable through a forged IPC response and cause it to load a malicious DLL from a...

EUVD-2026-111075

An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host prior to version 15.83 and the Remote Management Monitoring component prior to version 26.10.1 allows a local authenticated attacker with low privileges to execute scripts as SYSTEM/root...

CVE-2026-92372 Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Execution

An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows a remote attacker to execute arbitrary code by supplying crafted screen-image data during a remote-control session. The vulnerability can also be exploited ...

EUVD-2026-111073

An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows a remote attacker to execute arbitrary code by supplying crafted screen-image data during a remote-control session. The vulnerability can also be exploited ...

CVE-2026-94347

PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Process Control vulnerability. A high...

CVE-2026-117563

MrDoc through 1.1.1 contains a broken access control vulnerability in the managedocshare type 3 branch that allows authenticated users to modify other users' document share settings because updates lack an ownership check. Attackers can compute predictable share tokens from the MD5 of document ID...

CVE-2026-117554

Admidio before 5.0.17 contains an improper access control vulnerability that allows authenticated members to register event guests by submitting the additionalguests field when guests are disallowed. Attackers can set additionalguests to the remaining seat count in modules/events/eventsfunction.p...

CVE-2026-10537

A misconfiguration issue in the affected service in Control-M/Enterprise Manager and Control-M/Server may allow unauthenticated remote users to access certain service functionality, which could potentially result in information exposure or affect service availability. This vulnerability affects :...

NoMachine Terminal Server — Pre-Authentication Stack Overflow with Return-Address (RIP) Control

NoMachine Terminal Server — Pre-Authentication Stack Overflow with Return-Address RIP Control """NoMachine Terminal Server — Pre-Authentication Stack Overflow with Return-Address RIP Control""" from future import annotations from kittysploit import import os import socket import ssl import sys...

CVE-2026-94347

PowerProtect Data Domain Virtual Edition is affected by a Process Control vulnerability (CWE-114) across multiple release versions, including Feature Release 7.7.1.0 through 8.7, LTS2024 7.13.1.0 through 7.13.1.70, LTS2025 8.3.1.0 through 8.3.1.30, and LTS2026 8.6.1.0 through 8.6.1.10. A high pri...

CVE-2026-94347

PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Process Control vulnerability. A high...

EUVD-2026-110857

PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Process Control vulnerability. A high...

CVE-2026-10537 Remote unauthenticated information disclosure and denial of service due to unauthenticated service access

A misconfiguration issue in the affected service in Control-M/Enterprise Manager and Control-M/Server may allow unauthenticated remote users to access certain service functionality, which could potentially result in information exposure or affect service availability. This vulnerability affects :...

EUVD-2026-110856

A misconfiguration issue in the affected service in Control-M/Enterprise Manager and Control-M/Server may allow unauthenticated remote users to access certain service functionality, which could potentially result in information exposure or affect service availability. This vulnerability affects :...

CVE-2026-10537

A misconfiguration in Control-M/Enterprise Manager and Control-M/Server allows unauthenticated remote users to access certain service functionality. This vulnerability could lead to information exposure or denial of service . Affected versions include Control-M/Enterprise Manager and Control-M/Se...

Havoc

Havoc Havoc is a modern and malleable post-exploitation command and control framework, created by@C5pider. Quick Start Please see the Wiki for complete documentation. Havoc works well on Debian 10/11, Ubuntu 20.04/22.04 and Kali Linux. It's recommended to use the latest versions possible to avoid...

CVE-2026-117563

The MrDoc application (versions through 1.1.1) is affected by a broken access control vulnerability in the manage_doc_share type 3 branch. The root cause is a missing ownership check during updates, which allows authenticated users to modify the document share settings of other users. Attackers c...

CVE-2026-117563 MrDoc through 1.1.1 Broken Access Control via manage_doc_share

MrDoc through 1.1.1 contains a broken access control vulnerability in the managedocshare type 3 branch that allows authenticated users to modify other users' document share settings because updates lack an ownership check. Attackers can compute predictable share tokens from the MD5 of document ID...

CVE-2026-117563

MrDoc through 1.1.1 contains a broken access control vulnerability in the managedocshare type 3 branch that allows authenticated users to modify other users' document share settings because updates lack an ownership check. Attackers can compute predictable share tokens from the MD5 of document ID...

EUVD-2026-110841

MrDoc through 1.1.1 contains a broken access control vulnerability in the managedocshare type 3 branch that allows authenticated users to modify other users' document share settings because updates lack an ownership check. Attackers can compute predictable share tokens from the MD5 of document ID...