PT-2026-1994

Name of the Vulnerable Software and Affected Versions GPT Academic affected versions not specified Description A flaw exists that allows remote attackers to execute arbitrary code on affected installations of GPT Academic. Authentication is not required to exploit this issue. The vulnerability is...

PT-2026-2021

Name of the Vulnerable Software and Affected Versions ALGO 8180 IP Audio Alerter affected versions not specified Description A heap-based buffer overflow in the ALGO 8180 IP Audio Alerter can lead to remote code execution. This is a zero-day vulnerability. Recommendations At the moment, there is ...

PT-2026-1992

Name of the Vulnerable Software and Affected Versions GPT Academic affected versions not specified Description A flaw exists in the stream daas function that allows remote attackers to execute arbitrary code on affected systems. This is due to insufficient validation of user-supplied data, leadin...

PT-2026-2008

Name of the Vulnerable Software and Affected Versions ALGO 8180 IP Audio Alerter affected versions not specified Description A flaw exists in the web-based user interface of the ALGO 8180 IP Audio Alerter that allows remote attackers to execute arbitrary code. Authentication is required for...

PT-2026-1768

Name of the Vulnerable Software and Affected Versions Ollama MCP Server affected versions not specified Description This issue allows remote attackers to execute arbitrary code on affected installations of Ollama MCP Server without authentication. The flaw resides in the execAsync method due to...

PT-2026-2023

Name of the Vulnerable Software and Affected Versions ALGO 8180 IP Audio Alerter affected versions not specified Description A flaw exists in the web-based user interface of the ALGO 8180 IP Audio Alerter that allows remote attackers to execute arbitrary code. Authentication is required for...

PT-2026-2019

Name of the Vulnerable Software and Affected Versions ALGO 8180 IP Audio Alerter affected versions not specified Description A flaw exists in the handling of the Replaces header within SIP INVITE requests. The issue stems from insufficient validation of the length of user-supplied data before...

PT-2026-1998

Name of the Vulnerable Software and Affected Versions Langflow versions 1.4.2 and earlier Description An unauthenticated remote code execution flaw exists in the custom component editor's code validation logic. The application fails to properly validate user-supplied strings provided to the...

PT-2026-2012

Name of the Vulnerable Software and Affected Versions ALGO 8180 IP Audio Alerter affected versions not specified Description A flaw exists in the web-based user interface of the ALGO 8180 IP Audio Alerter that allows remote attackers to execute arbitrary code. Authentication is required for...

(0Day) ALGO 8180 IP Audio Alerter Ping Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific flaw exists within the web-based user interface. The issue results from the lack of proper...

Preparing for Post-Quantum Cryptography

Learn what you can do today to prepare for Q-Day...

gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

A heap-based buffer overflow in GIMP’s X Window Dump XWD file parser allows an attacker to craft a malicious XWD file or a web page that triggers opening one that can overflow a heap buffer during parsing and lead to remote code execution in the context of the GIMP process. The flaw is tracked as...

How Cisco Talos powers the solutions protecting your organization

Cisco Talos is Cisco's threat intelligence and security research organization that powers Cisco's product portfolio with that intelligence. While we are well known for the security research in our blog, vulnerability discoveries, and our open-source software, you may not be aware of exactly how o...

CVE-2026-21634

creationtimestamp| type| source ---|---|--- 2026-01-05 18:05:12+00:00| seen| Telegram/QHE3ZGhFyl2T5Z4zPcVefx-4WihQCgoreYtJ2GbiYf5-7cY 2026-02-25 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-128/...

gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

A heap-based buffer overflow in GIMP’s X Window Dump XWD file parser allows an attacker to craft a malicious XWD file or a web page that triggers opening one that can overflow a heap buffer during parsing and lead to remote code execution in the context of the GIMP process. The flaw is tracked as...

rxerium-templates

rxerium-templates N...

PT-2026-25339

GNU inetutils telnetd versions prior to 2.8 Description A buffer overflow exists in the LINEMODE SLC Set Local Characters suboption handler of the telnetd daemon. The issue occurs because the add slc function does not verify if the buffer is full before copying data, leading to an out-of-bounds...

Protecting Against Zero-Day Vulnerabilities with SOC-Level ASM Alert

Outpacing React2Shell using pre-breach alerts from Wiz ASM to eliminate exploitable risk before attackers find them...

CVE-2025-15351

creationtimestamp| type| source ---|---|--- 2025-12-30 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1202/ 2026-01-23 13:59:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md3ucyyrrs2h 2026-01-23 14:20:25+00:00| seen|...

CVE-2025-15349

creationtimestamp| type| source ---|---|--- 2025-12-30 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1200/ 2026-01-23 13:12:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md3rp3gubn25...