CVE-2026-124250: AyeCode Ltd GeoDirectory: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AyeCode Ltd…

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AyeCode Ltd GeoDirectory geodirectory allows Reflected XSS.This issue affects GeoDirectory: from n/a through 2.8.202...

CVE-2026-117477: GMO Prime Strategy Co., Ltd.: KUSANAGI provided by GMO Prime Strategy Co., Ltd

KUSANAGI provided by GMO Prime Strategy Co., Ltd. contains an HTTP header injection vulnerability that may allow arbitrary HTTP headers to be injected into the HTTP response when a user accesses a specially crafted URL...

CVE-2026-16283

Osbil Technology Ltd. oPanel is vulnerable to an OS command injection vulnerability due to the improper neutralization of special elements used in an OS command. This issue affects versions before 1.20.66 . Exploitation details and specific remediation steps are not provided in the documentation.

CVE-2026-16283 Command Injection in Osbil Technology's Ltd's oPanel

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in Osbil Technology Ltd.Osbil Technology Ltd. OPanel allows OS Command Injection. This issue affects oPanel: before 1.20.66...

CVE-2026-109582

Insecure storage of sensitive information issue exists in SS1 provided by DOS Co., Ltd. Sensitive information used by the product may be obtained...

EUVD-2026-119874

Insecure storage of sensitive information issue exists in SS1 provided by DOS Co., Ltd. Sensitive information used by the product may be obtained...

CVE-2026-109582

A security vulnerability exists in the SS1 product provided by DOS Co., Ltd. due to the insecure storage of sensitive information (CWE-922). This flaw allows an attacker to obtain sensitive information used by the product. The vulnerability is rated as MEDIUM severity with a CVSS v3.0 score of 4....

CVE-2026-109582

Insecure storage of sensitive information issue exists in SS1 provided by DOS Co., Ltd. Sensitive information used by the product may be obtained...

CVE-2026-107895

V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds write vulnerability. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product...

CVE-2026-107895

V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds write vulnerability. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product...

CVE-2026-107895

FUJI ELECTRIC CO., LTD. provides a V-SFT component that contains an out-of-bounds write vulnerability (CWE-787). An attacker can exploit this by opening a crafted V7 file , which may result in information exposure or arbitrary code execution on the affected product. The vulnerability requires use...

CVE-2026-107895

V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds write vulnerability. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product...

EUVD-2026-109625

V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds write vulnerability. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product...

CVE-2026-107894

V-SFT provided by FUJI ELECTRIC CO., LTD. contains a stack-based buffer overflow vulnerability. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product...

PT-2026-123185

V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds write vulnerability. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product...

U.S. Orders DeepSeek Removed From Federal Civilian Systems, Bans New Purchases

U.S. federal civilian agencies must remove DeepSeek products from their information technology systems, along with any third-party products or services "developed using DeepSeek implementations," under a Department of Homeland Security order. They may also no longer buy information technology...

CVE-2026-97627

Hidden functionality issue exists in Multiple DVRs Digital Video Recorders provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrator privilege may execute arbitrary OS commands...

CVE-2026-100737

Hidden functionality issue exists in Multiple DVRs Digital Video Recorders provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrator privilege may upgrade the affected product to unauthorized firmware...

CVE-2026-97627

Multiple Digital Video Recorders (DVRs) provided by Atsumi Electric Co., Ltd. are affected by a hidden functionality issue. An attacker with administrator privileges can exploit this vulnerability to execute arbitrary OS commands . No specific software versions, root cause files, or remediation s...

CVE-2026-97627

Hidden functionality issue exists in Multiple DVRs Digital Video Recorders provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrator privilege may execute arbitrary OS commands...