PT-2026-73181

A vulnerability was identified in CodeCanyon TimeCamp Integration for CRM up to 2.8. This issue affects some unknown processing of the file /clients/save contact of the component Contact Information Update. Such manipulation of the argument contact id leads to authorization bypass. The attack can...

CVE-2026-19966: Authorization Bypass Through User-Controlled Key

A vulnerability was identified in CodeCanyon TimeCamp Integration for CRM up to 2.8. This issue affects some unknown processing of the file /clients/savecontact of the component Contact Information Update. Such manipulation of the argument contactid leads to authorization bypass. The attack can b...

staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop

...

PT-2026-34333

An insecure direct object reference IDOR vulnerability in the Fullstep V5 registration process allows authenticated users to access data belonging to other registered users through various vulnerable authenticated resources in the application. The vulnerable endpoints result from:...

PT-2026-34970

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A divide-by-zero error exists in the tdfxfb driver within the fbdev subsystem. The issue occurs during the FBIOPUT VSCREENINFO operation because the driver uses the pixclock variable...

Linux SoC audio memory_info_update Heap Buffer Overflow

The vulnerability of the memoryinfoupdate function in the sound/soc/sof/debug.c module related to the Linux operating system’s SoC audio support involves copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an...

PHP Firebird () (No.1 from 2025.10.10 15:00:32)

...

EUVD-2025-17045

Malicious code in bioql PyPI...

CVE-2021-27692

creationtimestamp| type| source ---|---|--- 2025-06-10 21:02:29+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lrbs3qzz3u2u 2026-06-23 14:06:19+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/eea7e61e-c4af-4f2c-980b-d99ec90d7b8f...

CVE-2025-5714

CVE-2025-5714 affects SoluçõesCoop iSoluçõesWEB up to 20250516, specifically the Profile Information Update component. The vulnerability lies in the /sys/up.upload.php file where manipulating the nomeArquivo argument enables a path traversal, potentially exploitable remotely. Several sources (NVD...

CVE-2025-5714 SoluçõesCoop iSoluçõesWEB Profile Information Update up.upload.php path traversal

A vulnerability was found in SoluçõesCoop iSoluçõesWEB up to 20250516. It has been classified as problematic. This affects an unknown part of the file /sys/up.upload.php of the component Profile Information Update. The manipulation of the argument nomeArquivo leads to path traversal. It is possib...

iSoluçõesWEB SoluçõesCoop Path Traversal Vulnerability

iSoluçõesWEB SoluçõesCoop is a management system for iSoluçõesWEB in Brazil. A path traversal vulnerability exists in iSoluçõesWEB SoluçõesCoop 20250516 and earlier versions, which stems from an incorrect manipulation of the nomeArquivo parameter of the file /sys/up.upload.php in the component...

CVE-2025-5714: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was found in SoluçõesCoop iSoluçõesWEB up to 20250516. It has been classified as problematic. This affects an unknown part of the file /sys/up.upload.php of the component Profile Information Update. The manipulation of the argument nomeArquivo leads to path traversal. It is possib...

CVE-2024-24093

SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Personal Information Update information...

CVE-2024-24101

Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update...

PT-2025-20040 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to SMR May-2025 Release 1 Description: The issue concerns the improper export of Android application components in NotificationHistoryImageProvider, allowing local attackers to access notification images. This could...

CGA-V6F8-V6C4-P8QH

Bulletin has no description...

CVE-2025-21092

GMOD Apollo does not have sufficient logical or access checks when updating a user's information. This could result in an attacker being able to escalate privileges for themselves or others...

openSUSE Security Advisory (SUSE-SU-2024:0726-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-26365

creationtimestamp| type| source ---|---|--- 2025-02-12 15:35:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113991650909763601 2025-02-12 15:37:04+00:00| seen| Telegram/-xvFghkm9wAI3OH5CI2F-m8akBasfMJYjd3uJLYtuPd0nF4 2025-02-12 16:02:48+00:00| seen| https://t.me/cvedetector/17873...