Huawei HarmonyOS out-of-bounds read vulnerability

Huawei HarmonyOS is a distributed operating system developed independently by Huawei, designed for various scenarios. Huawei HarmonyOS has a out-of-bounds read vulnerability. This vulnerability stems from an issue with out-of-bounds reading in the graphics module. Attackers can exploit this...

Huawei HarmonyOS Permission Control Vulnerability

Huawei HarmonyOS is a distributed operating system developed independently by Huawei, designed for various scenarios. Huawei HarmonyOS has a permission control vulnerability. This vulnerability stems from issues with permission control in the event notification module. Attackers can exploit this...

Huawei HarmonyOS/EMUI denial-of-service vulnerability

Huawei HarmonyOS is a distributed operating system developed independently by Huawei, designed for various scenarios. Huawei EMUI is an emotional operating system developed by Huawei based on Android. Huawei HarmonyOS/EMUI has a denial-of-service vulnerability, which stems from a denial-of-servic...

CVE-2026-92398: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in Ruijie RG-EW3000GX EW3.01B11P380. Affected by this issue is some unknown functionality of the file /etc/rgconfig/admin of the component userlistnote Module. Performing a manipulation of the argument Name results in os command injection. It is possible to initiate the...

PT-2026-93855

A vulnerability was found in Ruijie RG-EW3000GX EW 3.01B11P380. Affected by this issue is some unknown functionality of the file /etc/rg config/admin of the component user list note Module. Performing a manipulation of the argument Name results in os command injection. It is possible to initiate...

Huawei HarmonyOS Permission Control Vulnerability (CNVD-2026-37862)

Huawei HarmonyOS is a distributed operating system developed independently by Huawei, designed for various scenarios. Huawei HarmonyOS has a permission control vulnerability. This vulnerability stems from a flaw in the window module’s permission management. Attackers can exploit this vulnerabilit...

The vulnerability of the CMP module in the OpenSSL library, which allows a hacker to trigger a service failure

The vulnerability of the CMP module in the OpenSSL library is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the CMP module in the OpenSSL library, which allows a hacker to trigger a service failure

The vulnerability of the CMP module in the OpenSSL library is related to the pointer manipulation during the processing of the protectionAlg parameter. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the CMP module in the OpenSSL library, which allows a hacker to trigger a service failure

The vulnerability of the CMP module in the OpenSSL library is related to deficiencies in the formatting string processing mechanism. Exploiting this vulnerability can allow a malicious actor to cause service failures...

PT-2026-94124

Name of the Vulnerable Software and Affected Versions djust versions prior to 1.0.7 Description djust allows an unauthenticated WebSocket or SSE client to trigger the import and execution of the top-level code of any importable Python module. This occurs because the live transport resolves the...

PT-2026-93740

A vulnerability has been found in itsourcecode Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /module/employee/index.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit ha...

PT-2026-94021

A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/leave/index.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used...

Huawei HarmonyOS/EMUI Permission Control Vulnerability (CNVD-2026-37866)

Huawei HarmonyOS is a distributed operating system developed independently by Huawei, designed for various scenarios. Huawei EMUI is an emotional operating system developed by Huawei based on Android. There is a permission control vulnerability in Huawei HarmonyOS/EMUI. This vulnerability stems...

CVE-2026-92364: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in itsourcecode Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /module/employee/index.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit ha...

Huawei HarmonyOS Denial-of-Service Vulnerability

Huawei HarmonyOS is a distributed operating system developed independently by Huawei, designed for various scenarios. Huawei HarmonyOS has a denial-of-service vulnerability. This vulnerability stems from issues with the preview service module, which can affect the availability of services when...

Huawei HarmonyOS Permission Control Vulnerability (CNVD-2026-37868)

Huawei HarmonyOS is a distributed operating system developed independently by Huawei, designed for various scenarios. Huawei HarmonyOS has a permission control vulnerability, which stems from a flaw in the event notification module’s permission management. Currently, no detailed details about thi...

Huawei HarmonyOS Out-of-Bounds Reading Vulnerability (CNVD-2026-37860)

Huawei HarmonyOS is a distributed operating system developed independently by Huawei, designed for various scenarios. Huawei HarmonyOS has a cross-domain reading vulnerability. This vulnerability stems from the graphics module failing to correctly verify the length and size of input data. Attacke...

Linux Distros Unpatched Vulnerability : CVE-2026-89909

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LoongArch: KVM: Free init resources if kvminit fails kvmloongarchinit calls kvmloongarchenvinit to allocate the per-CPU kvmcontext vmcs and kvmloongarchops and ...

Moderate: Red Hat Security Advisory: rsyslog security update

An update for rsyslog is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

rsyslog: A configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd

A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality or integrity impact, privilege escalation, or code...