ShortCode Addons - Unauthenticated Options Update

WordPress plugin Shortcode Addons = 3.0.2 contains an unauthenticated arbitrary option update caused by insufficient access controls in the plugin, letting attackers modify options without authentication. id: CVE-2022-34487 info: name: ShortCode Addons - Unauthenticated Options Update author:...

NVIDIA Triton Inference Server <= 26.02 - Authentication Bypass

NVIDIA Triton Inference Server contains an authentication bypass vulnerability, letting attackers bypass authentication and potentially execute code, escalate privileges, tamper data, cause denial of service, or disclose information, exploit requires no special conditions. id: CVE-2026-24207 info...

BeyondTrust Remote Support <= 26.2.3 - Origin Validation File Upload

The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance. id: CVE-2026-102764...

CVE-2023-43040

CVE-2023-43040 This repository contains a proof-of-concept exploit for the CVE-2023-43040 vulnerability found in RADOS Gateway RADOSGW. This vulnerability allows attackers to upload objects to any bucket accessible by the specified access key, potentially leading to unauthorized data manipulation...

CVE-2022-3689

CVE-2022-3689 Analysis Report Overview CVE-2022-3689 is an SQL injection vulnerability found in a specific WordPress plugin, which allows an attacker to exploit security vulnerabilities in web applications to insert malicious SQL code into the database. This can lead to serious security issues su...

CVE-2026-54436

Heap-based Buffer Overflow in the io-char library's DCMDCHRWAITINFO devctl handler could allow an attacker with local access to cause data tampering, arbitrary code execution, or a crash in the Character I/O device driver...

CVE-2026-54437

Improper Input Validation in the io-char library's DCMDCHRTCINJECTC devctl handler could allow an attacker with local access to cause data tampering in the memory input buffer of the Character I/O device driver...

CVE-2026-40275

Heap-based Buffer Overflow in the DCMDPROCEVENT handler of the procnto could allow an attacker with local access to cause an information disclosure, data tampering or a crash of the QNX Neutrino kernel...

EUVD-2026-122799

Heap-based Buffer Overflow in the DCMDPROCEVENT handler of the procnto could allow an attacker with local access to cause an information disclosure, data tampering or a crash of the QNX Neutrino kernel...

EUVD-2026-122791

Heap-based Buffer Overflow in the io-char library's DCMDCHRWAITINFO devctl handler could allow an attacker with local access to cause data tampering, arbitrary code execution, or a crash in the Character I/O device driver...

CVE-2026-54437 Vulnerabilities in the QNX io-char library Impacts QNX Software Development Platform

Improper Input Validation in the io-char library's DCMDCHRTCINJECTC devctl handler could allow an attacker with local access to cause data tampering in the memory input buffer of the Character I/O device driver...

EUVD-2026-122788

Improper Input Validation in the io-char library's DCMDCHRTCINJECTC devctl handler could allow an attacker with local access to cause data tampering in the memory input buffer of the Character I/O device driver...

CVE-2026-54437

The io-char library contains an Improper Input Validation vulnerability in the DCMD_CHR_TCINJECTC devctl() handler . This flaw could allow an attacker with local access to perform data tampering within the memory input buffer of the Character I/O device driver . No specific remediation or exploit...

CVE-2023-6360

CVE-2023-6360 Analysis Report Overview CVE-2023-6360 is an SQL injection vulnerability found in a specific WordPress plugin, allowing an attacker to exploit security weaknesses in the web application to inject malicious SQL code into the database. This can lead to serious security issues such as...

PT-2026-144416

Heap-based Buffer Overflow in the io-char library's DCMD CHR WAITINFO devctl handler could allow an attacker with local access to cause data tampering, arbitrary code execution, or a crash in the Character I/O device driver...

PT-2026-144417

Improper Input Validation in the io-char library's DCMD CHR TCINJECTC devctl handler could allow an attacker with local access to cause data tampering in the memory input buffer of the Character I/O device driver...

PT-2026-144415

Heap-based Buffer Overflow in the DCMD PROC EVENT handler of the procnto could allow an attacker with local access to cause an information disclosure, data tampering or a crash of the QNX Neutrino kernel...

Security Bulletin: IBM Virtualization Engine TS7700 is susceptible to multiple vulnerabilities due to the use of IBM® SDK, Java™ Technology Edition

Summary IBM Virtualization Engine TS7700 is susceptible to information disclosure and data tampering CVE-2026-60147 and denial of service CVE-2026-16243 vulnerabilities due to the use of IBM SDK, Java Technology Edition, Version 8. TS7700 uses Java to provide the Management Interface. Vulnerabili...

CVE-2026-118485

A flaw was found in axel. A remote attacker can cause the application to write downloaded content to arbitrary file system locations by enticing a user to download a file from a specially crafted URL. Because the application processes URL-encoded directory traversal sequences such as "../" after...

CVE-2026-77170

A flaw was found in Deck. Authenticated users can exploit a vulnerability in the Deck config API to set configuration keys for any board, even those they do not own or have permission to manage. This improper access control allows an attacker to perform unauthorized modifications to board...