PT-2026-3927

Authorization Bypass Through User-Controlled Key vulnerability in Solvera Software Services Trade Inc. Teknoera allows Exploitation of Trusted Identifiers.This issue affects Teknoera: through 01102025...

PT-2026-3765

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 11.9 through 18.6.3 GitLab CE/EE versions 18.7 through 18.7.1 GitLab CE/EE versions 18.8 through 18.8.1 Description GitLab CE/EE is affected by an issue related to unrestricted resource allocation. An unauthenticated...

ROS-20260121-73-0010

A vulnerability in the rxecleanup function of the rxepool.c component of the Linux kernel is related to improper control of resource identifiers. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

CVE-2025-49963

creationtimestamp| type| source ---|---|--- 2026-01-20 20:02:28+00:00| seen| Telegram/fMYFu5KBFVLJT0mlLdRRIfBapDJ5HzsO-6rws7oTheN0tY 2026-01-20 20:02:32+00:00| seen| Telegram/fN3HRIXpamftNoJynabwgfF0PiG7n5MNorfl43ZW2B0h3M...

MineAdmin Access Control Vulnerability

MineAdmin is an open-source permission management system developed by MineAdmin. Versions 1.x and 2.x of MineAdmin contain access control vulnerabilities. These vulnerabilities stem from incorrect operations with parameter IDs in files/systems and getFileInfoById, which may lead to information...

MiracleLinux 4 : glibc-2.12-1.212.3.1.AXS4 (AXSA:2021-1437:03)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-1437:03 advisory. glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding CVE-2019-25013 glibc: stack corruption fr...

MiracleLinux 8 : thunderbird-78.8.0-1.0.1.el8 (AXSA:2021-1569:03)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2021-1569:03 advisory. Mozilla: Content Security Policy violation report could have contained the destination of a redirect CVE-2021-23968 Mozilla: Content Security Policy...

ROS-20260120-7365

A vulnerability in the ksmbd component of the Linux operating system kernel is related to improper control of resource identifiers. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

IBM Sterling Connect: Express Adapter for Sterling Authorization Issue Vulnerability

IBM Sterling Connect: Express Adapter for Sterling is a communication adapter developed by the American multinational company International Business Machines IBM. There were authorization issues in versions 5.2.0.00 to 5.2.0.12 of the IBM Sterling Connect: Express Adapter for Sterling B2B...

MineAdmin Access Control Vulnerability

MineAdmin is an open-source permission management system developed by MineAdmin. Versions 1.x and 2.x of MineAdmin contain access control vulnerabilities. These vulnerabilities stem from incorrect operations with parameter IDs in files/systems/downloadById, which may lead to information leaks...

MiracleLinux 9 : bind-dyndb-ldap-11.9-8.el9_3.3.ML.1, bind-9.16.23-14.el9_3.4 (AXSA:2024-7681:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7681:01 advisory. bind: Preparing an NSEC3 closest encloser proof can exhaust CPU resources CVE-2023-50868 bind: KeyTrap - Extreme CPU consumption in DNSSEC validator...

MiracleLinux 9 : postgresql-13.18-1.el9_5 (AXSA:2024-9434:05)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-9434:05 advisory. postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID CVE-2024-10978 postgresql: PostgreSQL PL/Perl environment variable...

MiracleLinux 8 : cups-2.2.6-66.el8_10 (AXSA:2026-042:02)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-042:02 advisory. CUPS: Local denial-of-service via cupsd.conf update and related issues CVE-2025-61915 cups: Slow client communication leads to a possible DoS attack...

MiracleLinux 9 : edk2-20230524-4.el9 (AXSA:2023-6904:04)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6904:04 advisory. edk2: Function GetEfiGlobalVariable2 return value not checked in DxeImageVerificationHandler CVE-2019-14560 openssl: Possible DoS translating ASN.1...

Access Control Bypass

Overview @lobehub/lobehub is a LobeHub - an open-source,comprehensive AI Agent framework that supports speech synthesis, multimodal, and extensible Function Call plugin system. Supports one-click free deployment of your private ChatGPT/LLM web application. Affected versions of this package are...

EUVD-2026-3308

OpenProject is an open-source, web-based project management software. Users of OpenProject versions prior to 16.6.5 and 17.0.1 have the ability to view and end their active sessions via Account Settings → Sessions. When deleting a session, it was not properly checked if the session belongs to the...

ROS-20260119-7333

A vulnerability in the kvalloc function of the eventlog/acpi.c The component of the Linux kernel is related to improper control of resource identifiers. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260119-7368

A vulnerability in the nfsd4runcbwork function of the nfs4callback.c component of the Linux kernel is related to improper control of resource identifiers. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

CVE-2026-1112 Sanluan PublicCMS Trade Address Deletion Endpoint TradeAddressController.java delete improper authorization

A vulnerability was found in Sanluan PublicCMS up to 5.202506.d. Affected is the function delete of the file publiccms-trade/src/main/java/com/publiccms/controller/web/trade/TradeAddressController.java of the component Trade Address Deletion Endpoint. Performing a manipulation of the argument ids...

PublicCMS Authorization Issue Vulnerability

PublicCMS is an open-source content management system CMS developed by PublicCMS Company in China using the Java language. Versions of PublicCMS 5.202506.d and earlier have a vulnerability related to authorization. This vulnerability stems from incorrect handling of the ids parameter in the delet...