CVE-2026-90696: Improper Neutralization of Input During Web Page Generation

A vulnerability was determined in SourceCodester Inventory Management System 1.0. Affected by this issue is some unknown functionality of the file /api/productshandler.php of the component Product Management Module. Executing a manipulation of the argument ProductName can lead to cross site...

PT-2026-91112

A vulnerability has been found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file /api/customers handler.php of the component Customer Management Module. Such manipulation of the argument Customer Name leads to cross site scripting. The attack can be...

CVE-2023-50460

An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. The backend module allows an authenticated backend user to perform various actions userLogout, confirmUser, refuseUser, and resendUserConfirmation for any frontend user in the system...

The vulnerability of the functional module of the SAP Solution Manager SAP Solution Tools Plug-In (ST-PI) allows a perpetrator to disclose protected information.

The vulnerability of the functional module of the SAP Solution Manager SAP Solution Tools Plug-In ST-PI is related to the absence of an authentication process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information...

The vulnerability of the EndPoint DLP module of the remote access user protection agent for corporate resources and applications provided by Palo Alto Networks’ Prisma Access Agent allows attackers to bypass existing security mechanisms and expose protected information.

The vulnerability of the EndPoint DLP module of the remote user access agent for corporate resources and applications in Palo Alto Networks Prisma Access Agent is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows attackers to bypass existing security measure...

Linux Distros Unpatched Vulnerability : CVE-2026-25554

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSIPS versions 3.1 before 3.6.4 containing the authjwt module prior to commit 3822d33 contain a SQL injection vulnerability in the jwtdbauthorize function in...

@aaasd/pocpoc (99.99.9996), internal-company-module-test-1337 (>=99.99.9991, <=99.99.9995) potentially affected by unknown CVE via internal-company-module-test-1337 (99.99.9996)

internal-company-module-test-1337 NPM version 99.99.9996 is affected by a known vulnerability. The following packages have a transitive dependency on internal-company-module-test-1337 and may be impacted: - @aaasd/pocpoc 99.99.9996 - internal-company-module-test-1337 =99.99.9991, =99.99.9995 Sour...

@adatechnology/conversation-module (>=0.2.0, <=0.4.2), @adobe/spacecat-shared-brand-client (>=1.1.31, <=1.1.35) +308 more potentially affected by CVE-2026-90771 via joi (>=18.0.0, <=18.2.8)

joi NPM version =18.0.0, =0.2.0, =1.1.31, =1.0.0, =1.8.6, =2.61.4, =1.4.60, =1.6.11, =1.19.1, =1.11.2, =2.2.1, =1.0.0, =1.12.0, =3.14.0, =3.19.0 - @altipla/directus-sdk-utils 0.7.2 and more Source cves: CVE-2026-90771 Source advisory: SNYK:JS-JOI-19778379...

CVE-2026-90510

A security vulnerability has been detected in dromara orion-visor up to 2.5.7. This affects the function HostKeyServiceImpl.encryptKey of the file...

FreeBSD : znc -- multiple vulnerabilities (b7ae786a-af80-11f1-9800-641c67a117d8)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the b7ae786a-af80-11f1-9800-641c67a117d8 advisory. ZNC reports: CVE-2026-82373: Use-after-free when unloading modules, triggered by unprivileged...

znc -- multiple vulnerabilities

ZNC reports: CVE-2026-82373: Use-after-free when unloading modules, triggered by unprivileged users. To mitigate, set DenyLoadMod to true. CVE-2026-82374: Null pointer dereference in crypt module, triggered by IRC server. CVE-2020-11022, CVE-2020-11023: Updated the old bundled vulnerable version ...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-054006)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054006 advisory. In Python aka CPython up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow attackers t...

COPG v6.9.8

🎮 COPG — Advanced Android Customization & Spoofing A powerful platform for device & app spoofing, system-level control, and advanced ROM capabilities. 🌐 Official website — download COPG free & buy COPG PRO: vendors.copg.my 🌐 Languages / 语言：English · 简体中文 ✨ Why COPG? COPG is a Zygisk modul...

Linux Distros Unpatched Vulnerability : CVE-2026-89657

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libceph: validate OSD extent maps before cursor advance net/ceph/osdclient.c:osdsparseread validates that the sparse-read data length matches the summed extent...

Linux Distros Unpatched Vulnerability : CVE-2026-89763

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KEYS: trusted: Fix TPM teardown ordering trustedtpmexit drops the TPM chip reference and frees the digest array before unregistering the trusted key type...

Linux Distros Unpatched Vulnerability : CVE-2026-89437

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: int1092: Fix potential memory leak in sarprobe The memory allocated for devicemodeinfo in parsepackage called by sargetdata is not freed in some o...

Linux Distros Unpatched Vulnerability : CVE-2026-89612

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: reject invalid MFT LCNs from boot sector The NTFS boot sector stores the MFT and MFTMi...

Linux Distros Unpatched Vulnerability : CVE-2026-89709

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lockd, nfsd: RCU-protect nlmsvcops dispatch nlmsvcops is published by nfsdlockdinit and cleared by nfsdlockdshutdown with plain stores, while lockd dereferences...

Linux Distros Unpatched Vulnerability : CVE-2026-81015

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails amdpmcprobe registers the LPS0 s2idle handler with acpiregisterlps0dev and creates the...

Linux Distros Unpatched Vulnerability : CVE-2026-89638

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions When a file has the setuid or setgid bit set and is written to, the VFS...