PT-2026-97697

Name of the Vulnerable Software and Affected Versions Edimax BR-6428nC version 1.16 Description A flaw exists in the websRedirect function of the goform Handler component. A remote attacker can manipulate the submit-url argument to cause an open redirect, which occurs when an application redirect...

PT-2026-97642

Name of the Vulnerable Software and Affected Versions kvcache-ai mooncake versions 0.3.12 through 0.3.14-rc1 Description A weakness in the Regular Expression Handler component allows a remote attacker to perform a manipulation that leads to the allocation of resources. This issue specifically...

PT-2026-97780

Name of the Vulnerable Software and Affected Versions O2OA versions prior to 9.5.4 O2OA versions prior to 10.0.3 Description An issue exists in the Cipher Connection Handler component within the list function of the o2server/x base core...

PT-2026-97688

Name of the Vulnerable Software and Affected Versions huanzi-qch base-admin versions up to 52816b760cd53244989fd664bbb2b3d4edbfdbf1 Description A remote cross site scripting issue exists in the Add User Handler component. The problem occurs within the Save function located in the...

CVE-2026-96764: Allocation of Resources Without Limits or Throttling

A weakness has been identified in kvcache-ai mooncake up to 0.3.12/0.3.14-rc1. Impacted is the function MasterService::GetReplicaListByRegex of the component Regular Expression Handler. Executing a manipulation can lead to allocation of resources. The attack may be performed from remote. The...

PT-2026-98084

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ACPICA component where handler object types are not properly validated within the acpi ev has default handler and acpi ev find region handler functions...

Linux Distros Unpatched Vulnerability : CVE-2026-97502

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mmc: davinci: avoid NULL deref of host-data in IRQ handler mmcdavinciirq returns early only when both host-cmd and host-data are NULL: if host-cmd == NULL &&...

CVE-2026-96762 kvcache-ai mooncake RPC Path UnmountSegment authorization

A vulnerability was determined in kvcache-ai mooncake up to 0.3.12/0.3.13.post1. This affects the function UnmountSegment of the component RPC Path Handler. This manipulation of the argument clientid/segmentid causes authorization bypass. Remote exploitation of the attack is possible. The exploit...

CVE-2026-96762 kvcache-ai mooncake RPC Path UnmountSegment authorization

A vulnerability was determined in kvcache-ai mooncake up to 0.3.12/0.3.13.post1. This affects the function UnmountSegment of the component RPC Path Handler. This manipulation of the argument clientid/segmentid causes authorization bypass. Remote exploitation of the attack is possible. The exploit...

CVE-2026-96762

The software kvcache-ai mooncake (versions up to 0.3.12 and 0.3.13.post1 ) contains a vulnerability in the RPC Path Handler component. Specifically, the UnmountSegment function is susceptible to an authorization bypass caused by the manipulation of the client_id/segment_id arguments. This flaw al...

CVE-2026-96680

A vulnerability was detected in ByteDance Coze Scraper Extension up to 2.0.2. Affected by this vulnerability is the function chrome.runtime.onMessageExternal.addListener of the file static/background/index.js of the component External Message Handler. The manipulation of the argument...

CVE-2026-96606

A security flaw has been discovered in LB-Link BL-CPE600EU 5.8.13. This vulnerability affects unknown code of the file Mificonfig.bin of the component Configuration Backup Handler. The manipulation results in information disclosure. The attack can be launched remotely. The exploit has been releas...

CVE-2026-96680 ByteDance Coze Scraper Extension External Message index.js chrome.runtime.onMessageExternal.addListener authorization

A vulnerability was detected in ByteDance Coze Scraper Extension up to 2.0.2. Affected by this vulnerability is the function chrome.runtime.onMessageExternal.addListener of the file static/background/index.js of the component External Message Handler. The manipulation of the argument...

CVE-2026-96680

The ByteDance Coze Scraper Extension (up to version 2.0.2 ) contains a vulnerability in the External Message Handler component. Specifically, the chrome.runtime.onMessageExternal.addListener function within the static/background/index.js file fails to perform proper authorization when handling sp...

CVE-2026-96680 ByteDance Coze Scraper Extension External Message index.js chrome.runtime.onMessageExternal.addListener authorization

A vulnerability was detected in ByteDance Coze Scraper Extension up to 2.0.2. Affected by this vulnerability is the function chrome.runtime.onMessageExternal.addListener of the file static/background/index.js of the component External Message Handler. The manipulation of the argument...

CVE-2026-96603

A vulnerability has been found in Abdurrab5 online-makeup-store. Affected is the function confirmloggedin/confirmuser of the file functions.php of the component Admin Handler. Such manipulation of the argument adminid leads to missing authorization. The attack may be performed from remote. The...

CVE-2026-96601

A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login Handler. The manipulation of the argument id/password results in sql injection. The attack can be executed remotely. The exploit is now public and may...

CVE-2026-96602

A flaw has been found in Abdurrab5 online-makeup-store. This impacts an unknown function of the file customerSignin.php of the component Customer Login Handler. This manipulation of the argument username/password causes sql injection. The attack is possible to be carried out remotely. The exploit...

CVE-2026-96606 LB-Link BL-CPE600EU Configuration Backup Mifi_config.bin information disclosure

A security flaw has been discovered in LB-Link BL-CPE600EU 5.8.13. This vulnerability affects unknown code of the file Mificonfig.bin of the component Configuration Backup Handler. The manipulation results in information disclosure. The attack can be launched remotely. The exploit has been releas...

CVE-2026-96606

A security flaw in the LB-Link BL-CPE600EU (version 5.8.13) allows for information disclosure via the Configuration Backup Handler component. The vulnerability specifically affects unknown code within the Mifi_config.bin file. This flaw can be exploited remotely to disclose information. A public ...