ReadyScript e-commerce management system Session Management

The vulnerability of the ReadyScript e-commerce management system is related to improper session management. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

REDAAM IT-infrastructure Management System Auth Bypass

The vulnerability of the “REDAAM” IT-infrastructure centralized management system is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

KOMTEK Cassa Kurier Module Authentication Bypass

Vulnerability of the “KOMTEK Cassa Kurier” module of the 1C-Bitrix content management system: Website management is associated with the absence of authentication for a critical function. Exploitation of this vulnerability may allow an attacker to compromise the integrity and accessibility of...

Test IT testing management system Default Login Credentials Compromise

The vulnerability of the Test IT testing management system is related to the use of default login credentials. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

FOQUZ Platform Path Restriction Data Compromise

The vulnerability of the FOQUZ platform is related to an incorrect limitation on the name of the path to the catalog. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

FOQUZ Platform Session Duration

The vulnerability of the FOQUZ platform is related to an incorrect session duration. Exploiting this vulnerability can allow attackers to compromise the confidentiality and integrity of the protected information...

FOQUZ Platform Data Compromise

The vulnerability of the FOQUZ platform is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow attackers to compromise the confidentiality and integrity of the protected information...

Google Chrome Microsoft Edge CORS Compromise

The CORS component vulnerability in Google Chrome and Microsoft Edge web browsers is related to errors in the certificate validation process. Exploitation of this vulnerability may allow a remote attacker to compromise the integrity of protected information...

CVE-2026-115994

BOLA Allows Cross-Project Target Tampering in Cervantes version v1.3-beta could allow an attacker modify or delete targets belonging to other projects without authorization, compromising the integrity of penetration testing scopes, results, and associated security reports...

CVE-2026-115994 BOLA Allows Cross-Project Target Tampering

BOLA Allows Cross-Project Target Tampering in Cervantes version v1.3-beta could allow an attacker modify or delete targets belonging to other projects without authorization, compromising the integrity of penetration testing scopes, results, and associated security reports...

CVE-2026-115994

The software Cervantes version v1.3-beta is affected by a Broken Object Level Authorization (BOLA) vulnerability (CWE-639). This flaw allows an attacker to modify or delete targets belonging to other projects without proper authorization. Such actions could compromise the integrity of penetration...

EUVD-2026-109260

BOLA Allows Cross-Project Target Tampering in Cervantes version v1.3-beta could allow an attacker modify or delete targets belonging to other projects without authorization, compromising the integrity of penetration testing scopes, results, and associated security reports...

Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise

Summary Affected Object and Source Package: Pillow 12.3.0 Source: PyPI sdist pillow-12.3.0.tar.gz SHA-256: 3b8182a766685eaa002637e28b4ec8d6b18819a0c71f579bf0dbaa5830297cce Sink: src/imaging.c:2809:15, xsize += dx Details The code in Pillow 12.3.0 is: c for xsize = 0; text; text++ int dx =...

CVE-2026-96641 Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise

Pillow is a Python imaging library. Prior to 13.0.0, PILfont text-width accumulation in src/imaging.c checks positive glyph advances against INTMAX but does not check negative advances against INTMIN. Repeating a signed 16-bit advance of -32768 can therefore execute a signed C integer overflow in...

CVE-2026-96641 Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise

Pillow is a Python imaging library. Prior to 13.0.0, PILfont text-width accumulation in src/imaging.c checks positive glyph advances against INTMAX but does not check negative advances against INTMIN. Repeating a signed 16-bit advance of -32768 can therefore execute a signed C integer overflow in...

CVE-2026-96641

The Pillow Python imaging library is vulnerable to a signed C integer overflow in src/_imaging.c prior to version 13.0.0 . The PILfont text-width accumulation logic fails to check negative glyph advances against INT_MIN, allowing repeated 16-bit advances of -32768 to result in a large positive wi...

WebMCP Component Compromise Protected Information

The vulnerability in the WebMCP component of Google Chrome and Microsoft Edge stems from a flaw in its data source validation mechanism. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML page...

Passwords Component Data Compromise

The vulnerability in the Password component of Google Chrome and Microsoft Edge web browsers is related to insufficient validation of user-supplied protected information. Exploitation of this vulnerability may allow a remote attacker to compromise the integrity of protected information...

Google Chrome Edge ReaderMode Data Compromise

The vulnerability in the ReaderMode component of Google Chrome and Microsoft Edge web browsers is related to insufficient validation of input protected information. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a special...

Google Chrome Microsoft Edge Data Compromise

The UI component vulnerability in Google Chrome and Microsoft Edge is related to the user interface’s false representation of critical information. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected data by using a specially crafted HTML page...