PT-2026-84052

Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.29.8 Description An unauthenticated path traversal issue exists in the Settings component. The writeTraefikConfigInPath function within the packages/server/src/utils/traefik/application.ts file fails to properly...

PT-2026-83882

Name of the Vulnerable Software and Affected Versions armink struct2json version 1.0 Description An issue exists in the JSON Deserialization component within the library struct2json/inc/s2jdef.h. A remote attacker can cause a null pointer dereference—a condition where the software attempts to rea...

PT-2026-83779

Name of the Vulnerable Software and Affected Versions D-Link DNS-340L version 1.01B04 D-Link DNS-340L version 1.03B06 D-Link DNS-340L version 1.04.B02 D-Link DNS-340L version 1.05b04 D-Link DNS-345 version 1.01B04 D-Link DNS-345 version 1.03B06 D-Link DNS-345 version 1.04.B02 D-Link DNS-345 versi...

PT-2026-83949

A vulnerability was found in dibo-software diboot 3.8.0. Affected by this issue is some unknown functionality of the file /admin/ of the component Tenant Administrator Management API. Performing a manipulation of the argument tenantId results in improper access controls. The attack may be initiat...

PT-2026-83715

A vulnerability was determined in jeecgboot jeewx-boot up to 641ab52c3e1845fec39996d7794c33fb40dad1dd. This issue affects the function MyJwWebJwid3Controller.doUpload of the file jeewx-boot-module-weixin/src/main/java/com/jeecg/p3/open/web/back/MyJwWebJwid3Controller.java of the component doUploa...

PT-2026-83984

A vulnerability was found in MSI Dragon Center up to 2.0.155.0. Affected by this vulnerability is the function MmioWritePath in the library NTIOLib X64.sys of the component MMIO Write Path Handler. Performing a manipulation of the argument count/elementSize results in integer overflow. The attack...

PT-2026-83791

Name of the Vulnerable Software and Affected Versions D-Link DNS-320L versions prior to 20260717 D-Link DNS-327L versions prior to 20260717 D-Link DNS-340L versions prior to 20260717 D-Link DNS-345 versions prior to 20260717 Description A remote OS command injection exists within the CGI Handler...

PT-2026-83728

A flaw has been found in yaojingang GEOFlow up to 2.1.0. This issue affects the function preview of the file app/Http/Controllers/Admin/SiteThemeEditorController.php of the component Superadmin Theme Editor. This manipulation of the argument blade causes code injection. It is possible to initiate...

PT-2026-83686

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/inv edit.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might ...

PT-2026-83849

A vulnerability was identified in Edimax BR-6214K 1.40. This affects the function system of the file www/wlanMP.asp of the component asp WlanMP Endpoint. Such manipulation of the argument ateFunc leads to os command injection. It is possible to launch the attack remotely. The exploit is publicly...

PT-2026-83807

Name of the Vulnerable Software and Affected Versions itsourcecode Sales and Inventory System version 1.0 Description A remote SQL injection exists in the /pages/inv searchfrm.php file. The issue occurs when the ID argument is manipulated, allowing an attacker to execute arbitrary SQL commands on...

The vulnerability of the FileSystem component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to compromise data integrity.

The vulnerability of the FileSystem component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially crafted HTML page...

PT-2026-83699

A vulnerability was identified in Systerel S2OPC up to 1.7.3. The impacted element is the function monitored item event filter treatment bs init event filter ctx and result of the file src/ClientServer/services/bgenc/subscription mgr.c. Such manipulation of the argument EventFilter leads to use...

CVE-2026-82688: Improper Neutralization of Special Elements used in an OS Command

A security vulnerability has been detected in D-Link DNS-340L and DNS-345 1.01B04/1.03B06/1.04.B02/1.05b04. This impacts an unknown function of the file /cgi-bin/virtualvol.cgi of the component Virtual Volume Handler. The manipulation of the argument fsharename/ftarget/fname leads to os command...

CVE-2026-82623

A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UADataValuebackendcopyRange of the file plugins/historydata/uahistorydatabackendmemory.c of the component History Backend. The manipulation results in use after free. The attack can be launched...

PT-2026-83790

A flaw has been found in D-Link DNS-327L and DNS-340L up to 20260717. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/ve mgr.cgi. This manipulation of the argument f dev causes os command injection. The attack is possible to be carried out remotely. The exploit has...

PT-2026-83710

A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UA DataValue backend copyRange of the file plugins/historydata/ua history data backend memory.c of the component History Backend. The manipulation results in use after free. The attack can be...

PT-2026-84055

A security vulnerability has been detected in RedPort Optimizer wXa-203, Optimizer wXa-213 and Optimizer wXa-223 up to 20260704. This impacts the function exec of the file /xgatev1/system/datetime.php of the component System Clock. The manipulation leads to command injection. The attack may be...

PT-2026-83974

A weakness has been identified in caoqianming django-vue-admin 1.0. This vulnerability affects unknown code of the file /api/file/. Executing a manipulation of the argument file id can lead to improper access controls. The attack can be executed remotely. The exploit has been made available to th...

PT-2026-83716

A vulnerability was identified in PowerJob up to 5.1.2. Impacted is the function MuConnectionManager.getOrCreateConnection of the file powerjob-server/powerjob-server-starter/src/main/java/tech/powerjob/server/web/controller/TestController.java of the component Transport Endpoint. The manipulatio...