Zoom Workplace < 7.1.0 Vulnerability (ZSB-26016)

The version of Zoom Workplace installed on the remote host is prior to 7.1.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-26016 advisory. - Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting participant to...

Zoom Workplace < 7.1.5 Vulnerability (ZSB-26017)

The version of Zoom Workplace installed on the remote host is prior to 7.1.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-26017 advisory. - Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote code execution of anoth...

PT-2026-77245

Name of the Vulnerable Software and Affected Versions MobSF versions prior to 4.5.1 Description The unzip function in mobsf/StaticAnalyzer/views/common/shared func.py fails to properly handle archive members that exceed the ZIP MAX UNCOMPRESSED FILE SIZE limit. While the system logs that the...

PT-2026-76941

ArcadeDB before 26.8.1 contains a denial of service vulnerability in the Cypher range function that allows authenticated users to exhaust server heap memory. Attackers can submit oversized range expressions with large bounds to trigger OutOfMemoryError and cause temporary service degradation or...

dyen macOS In-Memory Mach-O Loader

dyen is a macOS in-memory Mach-O dynamic library loader designed to execute a dylib using the stock Python interpreter without writing the decrypted Mach-O to disk or registering the payload with dyld. It supports encrypted standalone payloads and encrypted dylibs appended to otherwise valid cove...

PostgreSQL Remote Code Execution

PostgreSQL versions 14.0 through 14.23, 15.0 through 15.18, 16.0 through 16.14, 17.0 through 17.10, and 18.0 through 18.5 contain a heap buffer overflow in tochar when processing timezone abbreviations. An authenticated remote attacker able to execute SQL statements can exploit the vulnerability ...

PT-2026-76946

ArcadeDB before 26.8.1 affected versions = 26.7.3 contains a missing authorization vulnerability in the DELETE FUNCTION SQL statement. DeleteFunctionStatement.executeSimple unregisters and persists deletion of a server-side function without any checkPermissionsOnDatabase UPDATE SCHEMA check. Any...

Zoom Workplace < 7.1.0 Vulnerability (ZSB-26015)

The version of Zoom Workplace installed on the remote host is prior to 7.1.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-26015 advisory. - Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, which may allow a meeting participant to...

CVE-2026-68924: Uncontrolled Resource Consumption

MobSF is a mobile application security testing tool used. Prior to 4.5.1, the unzip function in mobsf/StaticAnalyzer/views/common/sharedfunc.py logs that an archive member exceeding ZIPMAXUNCOMPRESSEDFILESIZE is being skipped but does not continue to the next member, so an authenticated user can...

Zoom Workplace VDI Client < 6.6.16 / 7.0.11 Vulnerability (ZSB-26016)

The version of Zoom Workplace VDI Client installed on the remote host is prior to 6.6.16 / 7.0.11. It is, therefore, affected by a vulnerability as referenced in the ZSB-26016 advisory. - Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a...

Zoom Workplace VDI Client < 6.6.16 / 7.0.11 Vulnerability (ZSB-26015)

The version of Zoom Workplace VDI Client installed on the remote host is prior to 6.6.16 / 7.0.11. It is, therefore, affected by a vulnerability as referenced in the ZSB-26015 advisory. - Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, which may allow a...

Zoom Workplace VDI Client < 6.6.16 / 7.0.11 Vulnerability (ZSB-26017)

The version of Zoom Workplace VDI Client installed on the remote host is prior to 6.6.16 / 7.0.11. It is, therefore, affected by a vulnerability as referenced in the ZSB-26017 advisory. - Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote co...

CVE-2026-75841: Allocation of Resources Without Limits or Throttling

ArcadeDB before 26.8.1 contains a denial of service vulnerability in the Cypher range function that allows authenticated users to exhaust server heap memory. Attackers can submit oversized range expressions with large bounds to trigger OutOfMemoryError and cause temporary service degradation or...

CVE-2026-75846: Missing Authorization

ArcadeDB before 26.8.1 affected versions = 26.7.3 contains a missing authorization vulnerability in the DELETE FUNCTION SQL statement. DeleteFunctionStatement.executeSimple unregisters and persists deletion of a server-side function without any checkPermissionsOnDatabase UPDATESCHEMA check. Any...

PT-2026-78251

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-823DRU version 1.1.02b01 Description A stack-based buffer overflow exists in the NVRAM component. This issue occurs when the strcpy function in the '/cgi-bin/wan.cgi' endpoint improperly handles the wan l2tp password argument,...

expat2 -- Inefficient Algorithmic Complexity

https://github.com/libexpat/libexpat/pull/1321 reports: Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts function in xmlparse.c, where processing N specified attributes with non-normalized values triggers an ON^2 linear sca...

ANT-2026-HRZEDXBB · ghostscript · Stack-buffer-overflow

stack-buffer-overflow critical Severity Claude critical · Security research firm critical · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-HRZEDXBB: Stack-buffer-overflow in...

CVE-2026-67918

Directory Traversal vulnerability in hermes-studio v.0.6.26 allows a remote attacker to obtain sensitive information via the validatePath function in api/hermes/download endpoint...

ANT-2026-B615AQ9E · exim · off-by-one

off-by-one medium CVE-2026-40685 Severity Claude high · Security research firm high · Maintainer medium Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-B615AQ9E: Exim dewrap Off-By-One OOB Read → Co...

ANT-2026-A5580GNM · xdao · logic-error

logic-error WITHDRAWN This report was withdrawn after publication. The original commitment below remains in the ledger, and the identifying fields published before the withdrawal are kept as they were first published. Note, 2026-10-02. This page showed the full report from 2026-08-26 until...