CVE-2026-73440: Improper Removal of Sensitive Information Before Storage or Transfer

On affected platforms running Arista EOS with Simple Network Management Protocol SNMP configured, SNMPv3 local or remote user credentials may be exposed as a one-way hashed, localized key value within the device's running and sanitized configurations. An authenticated user who gains access to thi...

PT-2026-82477

In CodeMeter Runtime before versions 8.41a and 9.10, the logger does not sanitize input strings in certain cases, allowing an attacker to inject printf-style format specifiers. This can be used to reliably crash CodeMeter and disclose sensitive information such as process memory and stack canarie...

CVE-2026-59682 Arbitrary file overwrite and deletion local and remote in OpenRGB

Arbitrary file overwrite via SAVEPROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3...

CVE-2026-59682 Arbitrary file overwrite and deletion local and remote in OpenRGB

Arbitrary file overwrite via SAVEPROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3...

CVE-2026-59682

OpenRGB through 1.0rc3 is affected by an arbitrary file overwrite and deletion vulnerability via the SAVE_PROFILE message, allowing both local and remote exploitation. Per CVSS 3.1, this is rated CRITICAL (9.1) with a network attack vector requiring no privileges and no user interaction , resulti...

NLTK has Arbitrary File Read via Absolute Path Input in nltk.util.filestring()

A vulnerability in the filestring function of the nltk.util module in nltk version 3.9.2 allows arbitrary file read due to improper validation of input paths. The function directly opens files specified by user input without sanitization, enabling attackers to access sensitive system files by...

CVE-2026-0846: Absolute Path Traversal

A vulnerability in the filestring function of the nltk.util module in nltk version 3.9.2 allows arbitrary file read due to improper validation of input paths. The function directly opens files specified by user input without sanitization, enabling attackers to access sensitive system files by...

CVE-2025-49655: Deserialization of Untrusted Data

Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabling a maliciously uploaded Keras file containing a TorchModuleWrapper class to run arbitrary code on an end user’s system when loaded despite safe mode being...

CVE-2025-1868

Vulnerability of unauthorized exposure of confidential information affecting Advanced IP Scanner and Advanced Port Scanner. It occurs when these applications initiate a network scan, inadvertently sending the NTLM hash of the user performing the scan. This vulnerability can be exploited by...

OESA-2024-1632 nautilus security update

It's easier to manage your files for the GNOME desktop. Ability to browse directories on local and remote systems. preview folders and launch related programs. It is also handle icons on the GNOME desktop. Security Fixes: GNOME Nautilus 42.2 allows a NULL pointer dereference and getbasename...

Vulnerabilities in the Debian GNU/Linux operating system that allow a local malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

The xtell package of the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

KLA10376 ACE vulnerability in UltraEdit

An untrusted path vulnerability was found in UltraEdit. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited locally and possibly remotely via a library hijack. Original advisories - Related products UltraEdit CVE list CVE-2010-3402...

Multiple Media Players ((iTunes / QuickTime) - HTTP DataHandler Overflow

ScaryMovie Exploit Study By: DrIDE October, 2009 There is a widespread failure in the way that .MOV files are handled by the Quicktime Library. I have attempted to compound my findings on this issue. Nearly every .MOV enabled application that I tested fell victim to this exploit. This is a local...

M.J.M. Quick Player 1.2 - Local Stack Buffer Overflow

Vulnerability : M.J.M. Quick Player v1.2 Stack BOF Discovered by : mrme seeleymagicathotmaildotcom Sploit written by : corelanc0d3r corelanc0d3ratgmaildotcom Sploit released : dec 28th, 2009 Type : local and remote code execution OS : Windows Product : M.J.M. Quick Player Versions affected : 1.2...

Xion Audio Player 1.0 121 .m3u file Buffer Overflow

No description provided by source. Vulnerability : Xion Audio Player Local BOF Discovered by : Dragon Rider http://securityreason.com/exploitalert/7392 drag0n.riderathotmail.com Sploit written by : corelanc0d3r corelanc0d3ratgmaildotcom Sploit released : nov 3rd, 2009 Type : local and remote code...

Xion Audio Player Local Buffer Overflow

Vulnerability : Xion Audio Player Local BOF Discovered by : Dragon Rider http://securityreason.com/exploitalert/7392 drag0n.riderathotmail.com Sploit written by : corelanc0d3r corelanc0d3ratgmaildotcom Sploit released : nov 3rd, 2009 Type : local and remote code execution OS : Windows Product :...

Xion Audio Player 1.0 121 .m3u file Buffer Overflow

Exploit for unknown platform in category remote exploits =================================================== Xion Audio Player 1.0 121 .m3u file Buffer Overflow =================================================== Title: Xion Audio Player 1.0 121 .m3u file Buffer Overflow CVE-ID: OSVDB-ID: Author:...

DSA-1503-1 kernelimage-2.4.27 - several issues

Bulletin has no description...

DSA-1067-1 kernel-source-2.4.16 - several

Bulletin has no description...

[SA17865] VisNetic Mail Server Multiple Webmail Vulnerabilities

TITLE: VisNetic Mail Server Multiple Webmail Vulnerabilities SECUNIA ADVISORY ID: SA17865 VERIFY ADVISORY: http://secunia.com/advisories/17865/ CRITICAL: Highly critical IMPACT: Exposure of sensitive information, System access WHERE: From remote SOFTWARE: VisNetic Mail Server 8.x...