Azure Function Information Disclosure Vulnerability

...

CVE-2025-15507

The Magic Import Document Extractor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxsyncusage function in all versions up to, and including, 1.0.5. This makes it possible for unauthenticated attackers to modify the plugin's...

sql-injection

SQL Injection Payloads List SQL Injection Payloads List...

CVE-2025-14079

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.3.5. This is due to missing capability checks on the ehcrmticketgeneral function combined with a shared nonce that is exposed to low-privileg...

RLSA-2026:1696 Moderate: util-linux security update

The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these include the fdisk configuration tool and the login program. Security Fixes: util-linux: util-linux: Heap buffer overread in setpwnam when processing...

PT-2026-6584

Name of the Vulnerable Software and Affected Versions 10-Strike Network Inventory Explorer version 8.54 Description The software contains a structured exception handler buffer overflow that allows for arbitrary code execution by overwriting SEH records. An attacker can trigger this by crafting a...

PT-2026-6636

Name of the Vulnerable Software and Affected Versions Azure Function affected versions not specified Description An information disclosure issue exists in Azure Function. The issue allows for the potential disclosure of information. Recommendations At the moment, there is no information about a...

ROS-20260205-73-0035

A vulnerability in the hashaccept function of the crypto/algifhash.c component of the Linux kernel is related to memory re-release. Exploitation of the vulnerability may allow an attacker to gain access to sensitive data, compromise its integrity, and cause a denial of service...

The vulnerability of the mt7921_usb_sdio_tx_prepare_skb() function in the drivers/net/wireless/mediatek/mt76/mt7921/mac.c module of the Mediatek wireless communication adapter driver for the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the mt7921usbsdiotxprepareskb function in the drivers/net/wireless/mediatek/mt76/mt7921/mac.c file of the Mediatek wireless communication adapter driver module is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker ...

The vulnerability of the asm() function in the kernel/kheaders.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the asm function in the kernel/kheaders.c module of the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the pinmux_func_name_to_selector() function in the drivers/pinctrl/pinmux.c file of the GPIO controller driver for Linux kernel, which allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the pinmuxfuncnametoselector function in the drivers/pinctrl/pinmux.c file, a driver for LINUX operating system GPIO controllers, is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

PT-2026-6809

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.1.2132 Description Vim, an open source command line text editor, contains a heap buffer overflow in its tag file resolution logic when processing the 'helpfile' option. The issue resides in the get tagfname function...

The vulnerability of the `txBegin()` function in the JFS file system module `fs/jfs/jfs_txnmgr.c` of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the txBegin function in the JFS file system module fs/jfs/jfstxnmgr.c of the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

EPSON WF-2861 Missing Authentication for Critical Function (CVE-2018-19248)

The web service on Epson WorkForce WF-2861 10.48 LQ22I3Recovery- mode, WF-2861 10.51.LQ20I6, and WF-2861 10.52.LQ17IA devices allows remote attackers to upload a firmware file and reset the printer without authentication by making a request to the /DOWN/FIRMWAREUPDATE/ROM1 URI and a POST request ...

PT-2026-6648

Name of the Vulnerable Software and Affected Versions SandboxJS versions prior to 0.8.29 Description SandboxJS is a JavaScript sandboxing library affected by an issue where the return values of functions are not properly wrapped. This allows attackers to use Object.values or Object.entries to...

Identifying Adversary Tactics and Techniques in Malware Binaries with an LLM Agent

Understanding TTPs Tactics, Techniques, and Procedures in malware binaries is essential for security analysis and threat intelligence, yet remains challenging in practice. Real-world malware binaries are typically stripped of symbols, contain large numbers of functions, and distribute malicious...

The vulnerability of the init() and fini() functions in the drivers/char/virtio_console.c module of the Linux kernel driver support for alphanumeric devices allows a attacker to cause a service failure.

The vulnerability of the init and fini functions in the drivers/char/virtioconsole.c driver module, which supports alphanumeric devices in Linux kernels, relates to the exposure of information through event log files. Exploiting this vulnerability can allow an attacker to cause service failures...

AZL-76721 CVE-2026-25541 affecting package rust for versions less than 1.90.0-6

Bytes is a utility library for working with bytes. From version 1.2.1 to before 1.11.1, Bytes is vulnerable to integer overflow in BytesMut::reserve. In the unique reclaim path of BytesMut::reserve, if the condition "vcapacity = newcap + offset" uses an unchecked addition. When newcap + offset...

CVE-2026-25584 iccDEV vulnerable to Stack-based Buffer Overflow in CIccTagFloatNum::GetValues()

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a stack-buffer-overflow vulnerability in CIccTagFloatNum::GetValues. This is triggered when processing a malformed ICC...

CVE-2026-25583

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a heap buffer overflow vulnerability in CIccFileIO::Read8 when processing malformed ICC profile files via unchecked fread...