PT-2026-115069

Name of the Vulnerable Software and Affected Versions OpenPrinting CUPS versions prior to 2.4.20 Description The copy model function in scheduler/ipp.c creates a predictable file path in a directory writable by the lp-group. Because the file is opened as root without using O EXCL or O NOFOLLOW...

GHSA-PQQG-5F4F-8952 FacturaScripts has SQL Injection in Autocomplete Actions

Summary FacturaScripts contains a critical SQL Injection vulnerability in the autocomplete functionality that allows authenticated attackers to extract sensitive data from the database including user credentials, configuration settings, and all stored business data. The vulnerability exists in th...