PT-2026-78317

To retrieve the previous timer value, the kernel calls realtimer gettime, which obtains the current time for the timer's clock. For a timer using CLOCK TAI this can fail when no TAI offset has been configured, but the error return was not checked, so the uninitialized output buffer was copied to...

PT-2026-78319

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The GETALL and SETALL commands in the semctl function contain a flaw in how they handle semaphore sets. The process records the number of semaphores, releases th...

PT-2026-78252

Name of the Vulnerable Software and Affected Versions xianrendzw EasyReport versions prior to 2.0.17.0522 Beta Description A remote issue exists within the QueryerFactory component in the DataSourceController.add function of the DataSourceController.java file. Manipulating the queryerClass argume...

PT-2026-78257

Name of the Vulnerable Software and Affected Versions TRENDnet Router version 1.1.02b01 Description A remote command injection flaw exists in the /cgi-bin/ping.cgi endpoint. The issue occurs when the wan type argument is manipulated, allowing an attacker to execute arbitrary commands on the syste...

PT-2026-78682

Name of the Vulnerable Software and Affected Versions code-projects Hospital Information System version 1.0 Description A remote SQL injection exists in the User Login Handler component. The issue occurs within the User::login function located in the includes/users/UsersController.php file, where...

PT-2026-78719

A security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is some unknown functionality of the file /cgi-bin/admin/set time.cgi of the component alphapd. The manipulation of the argument Currenttime results in stack-based buffer overflow. The attack can be...

ROS-20260819-73-0016

The vulnerability in MediaWiki is related to the lack of protection for administrative data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

openssl_encrypt File Read Write

The vulnerability in the opensslencrypt/modules/pluginsystem/pluginsandbox.py file, belonging to the opensslencrypt library written in Python, relates to a data protection mechanism flaw. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to rea...

ROS-20260819-73-0052

The vulnerability in Tomcat11 is related to the implementation of incorrect control flow. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

ROS-20260819-73-0064

The vulnerability in Tomcat11 is related to incorrect processing of data with URL encoding. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

PT-2026-78254

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-823DRU version 1.1.02b01 Description Remote command injection is possible via the /cgi-bin/admin.cgi endpoint. The issue occurs when the Hostname argument is manipulated, allowing an attacker to execute arbitrary commands on the...

PT-2026-78683

Name of the Vulnerable Software and Affected Versions yangzongzhuan RuoYi-Vue versions prior to 3.9.3 Description A path traversal issue exists in the Common Download Endpoint within the fileDownload and resourceDownload functions of the CommonController.java file. A remote attacker can manipulat...

PT-2026-78704

A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected is the function popen/system of the file /cgi-bin/ping.cgi of the component ssi. Executing a manipulation of the argument ipaddr can lead to command injection. It is possible to launch the attack remotely. The exploit has...

PT-2026-78833

A vulnerability was found in TRENDnet TEW-755AP up to 20260702. Affected is the function FUN 401000 of the file /sbin/mycli. The manipulation of the argument ssid results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used...

PT-2026-78868

Name of the Vulnerable Software and Affected Versions mruby version 3.1.0 Description A flaw exists in the udiv function within the bigint.c file. A remote attacker can perform a manipulation that results in a floating point comparison using an incorrect operator. Recommendations Apply a patch to...

PT-2026-78862

A vulnerability was detected in code-projects Assessment Management 1.0. The affected element is an unknown function of the file /welcome.php. The manipulation of the argument userid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

CVE-2026-50719

The Ingenic T41 , and likely the T32, T40, and A1 SoCs, are vulnerable in their boot ROMs due to an improper handling of the SPL header init table. The boot ROM parses and executes an attacker-controlled init table before performing secure boot state checks or signature verification. Because the ...

Win32k.sys Privilege Escalation

The vulnerability of the Win32k.sys component in Windows operating systems is related to the possibility of using memory after it has been freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

ROS-20260819-73-0022

The vulnerability in MediaWiki is related to the lack of protection for administrative data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

ROS-20260819-73-0047

The vulnerability in Tomcat relates to the failure to remove script-related HTML tags from web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...