231728 matches found
PT-2026-60768
A security flaw has been discovered in mosaxiv clawlet up to 0.2.10. Impacted is the function list/remove of the file tools/tool cron.go of the component cron Chat Tool. The manipulation results in missing authorization. The attack may be performed from remote. The exploit has been released to th...
PT-2026-60739
A security vulnerability has been detected in sagold json-schema-library 11.5.0/11.5.1. This impacts the function parsePropertyDependencies of the file src/keywords/propertyDependencies.ts. The manipulation leads to improperly controlled modification of object prototype attributes. The attack can...
The vulnerability of the GPAC multimedia platform, related to the lack of memory release after the effective service life, allows a intruder to trigger a service failure.
The vulnerability of the multimedia platform GPAC is related to the lack of memory release after the effective lifespan of the device. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-59117
Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code over a network...
GHSA-X8MG-6R4P-87PF ArcadeDB has cross-database IDOR: /ts/*, /batch/*, Prometheus and Grafana handlers bypass authorization
About 14 HTTP handlers resolve the database path param and call getDatabase... WITHOUT user.canAccessToDatabase... and without setting the engine principal, because they extend AbstractServerHttpHandler directly instead of DatabaseAbstractHandler which holds the only per-database gate at...
Exploit for CVE-2026-13001
No d...
vulnerabilities handled in Mozilla Firefox
Mozilla has identified vulnerabilities in Firefox, specifically in version 152.0.6. Through a combination of two vulnerabilities, malicious actors can execute malicious code on victims’ systems remotely. For successful exploitation, users must visit a malicious website or a legitimate website wit...
CVE-2026-59200
A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit a vulnerability in the PdfParser.PdfStream.decode function when processing a crafted FlateDecode PDF stream. By providing a specially designed PDF file, the attacker could cause the application to exhaust...
CVE-2026-61860
A flaw was found in ImageMagick. This vulnerability, a use-after-free, occurs when the freetype library fails to initialize, causing the software to continue processing with freed memory. A remote attacker could exploit this during image processing, leading to a denial of service DoS condition,...
Exploit for Use After Free in Linux Linux_Kernel
CVE-2026-43499 — Galaxy S25 Ultra Port This repository contai...
Exploit for Use After Free in Linux Linux_Kernel
No d...
Exploit for Use After Free in Linux Linux_Kernel
GhostLock CVE-2026-43499 – Redmi K70 Ultra rothko A data-...
EUVD-2026-44837
A flaw has been found in H3C SecPath F1000-C8300 up to 20260522. This impacts an unknown function of the file /webui/?g=logfwnbcmailjsondata. Executing a manipulation of the argument subject can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be...
CVE-2026-3842 Qemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob write
A flaw was found in QEMU. This vulnerability allows a local attacker within a guest virtual machine to write data beyond its allocated memory. This occurs when cpuphysicalmemorymap returns a shorter length than expected, leading to an out-of-bounds write. Successful exploitation could result in...
CVE-2026-15909 RafyMrX TOKO-ONLINE-ROTI add.php authorization
A vulnerability has been found in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. Affected is an unknown function of the file proses/add.php. The manipulation of the argument kdcs leads to authorization bypass. The attack is possible to be carried out remotely. This produ...
PT-2026-60350
A vulnerability has been found in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. Affected is an unknown function of the file proses/add.php. The manipulation of the argument kd cs leads to authorization bypass. The attack is possible to be carried out remotely. This...
CVE-2021-27137
CVE-2021-27137 affects DD-WRT’s UPnP service (ssdp.c) before change set 45724, where an unsafe strcpy copies user-supplied data into a fixed 128-byte buffer, enabling a remote unauthenticated attacker to overflow the buffer via M-SEARCH requests on UDP/1900. By default UPnP is off and bound to in...
ROS-20260716-73-0032
The vulnerability of the PDFium component in the Google Chrome browser is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow a malicious actor to execute a brute-force attack remotely...
The vulnerability of the mechanism used by Git to resolve programmatic platform names for collaborative code development on GitLab CE/EE allows a perpetrator to compromise the integrity of the protected information.
The vulnerability of the mechanism for resolving Git-link names in the software platform based on Git for collaborative code development in GitLab CE/EE is related to the use of a name with an incorrect link. Exploiting this vulnerability could allow a malicious actor to compromise the integrity ...
Linux Distros Unpatched Vulnerability : CVE-2026-42533
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture...