233871 matches found
Joomla JCE_2.9.15 - Remote Code Execution
Exploit Title: Joomla JCE2.9.15 - Remote Code Execution Date: 2026-07-10 Exploit Author: K3ysTr0K3R Jared Brits Vendor Homepage: https://www.joomla.org/ Software Link: https://extensions.joomla.org/extension/jce/ Version: JCE 1.0.0 through 2.9.99.4 fixed in 2.9.99.5 Tested on: Joomla 3.10.11 / JC...
CVE-2026-50769
The CRM+ application before and including version 2025.6 from Brainformatik is vulnerable to SQL Injection time-based vulnerability. The check conflict endpoint index.php?module=Appointments&action=CheckConflictOfDates&ajaxSkipHeader=true which is used to check any conflicts for user calendar is...
PT-2026-76623
openssl encrypt before 1.4.0 imports Python's non-cryptographic 'random' module Mersenne Twister PRNG at line 15 of openssl encrypt/modules/pqc.py. No direct calls to random. were present in the code, so no cryptographic operation is currently affected; however, the import creates a hazard that...
PT-2026-76710
The WNC-M14A2A LTE-M modem driver mishandles unsolicited %NOTIFYEV: events in on cmd socknotifyev drivers/modem/vendor standalone/wncm14a2a.c. The response line is linearized into a fixed 40-byte stack buffer via net buf linearize, which caps the copy at 39 bytes and returns out len = 39. The two...
PT-2026-76610
openssl encrypt versions before 1.4.0 use Python's non-cryptographic random module for steganographic pixel selection in the generate pseudorandom sequence function. Attackers who know the password can recover the Mersenne Twister state from approximately 624 outputs and predict pixel locations...
CVE-2026-67926
JeecgBoot v3.9.2's AI Chat Module accepts a "files" parameter without proper validation, enabling a remote unauthenticated attacker to upload and execute arbitrary code, yielding full confidentiality, integrity, and availability compromise (CVSS 9.8 critical). No patch version or in-the-wild expl...
EUVD-2026-60357
The CRM+ application before and including version 2025.6 from Brainformatik is vulnerable to SQL Injection time-based vulnerability. The check conflict endpoint index.php?module=Appointments&action=CheckConflictOfDates&ajaxSkipHeader=true which is used to check any conflicts for user calendar is...
The vulnerability of the iccdebugfs_client_init() function in the drivers/interconnect/debugfs-client.c module of the Linux kernel’s interconnection driver allows a attacker to cause a service failure.
The vulnerability of the iccdebugfsclientinit function in the drivers/interconnect/debugfs-client.c file of the Linux kernel’s interconnection driver module relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the mt7925_mac_write_txwi_80211() function in the drivers/net/wireless/mediatek/mt76/mt7925/mac.c file of the wireless adapter driver module from mediatek’s Linux kernel, which allows a hacker to compromise the confidentiality and accessibility of protected information.
The vulnerability of the mt7925macwritetxwi80211 function in the drivers/net/wireless/mediatek/mt76/mt7925/mac.c file of the wireless adapter driver module from mediatek’s Linux kernel is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100556)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100556 advisory. In the Linux kernel, the following vulnerability has been resolved: ixgbevf: fix use-after-free in VEPA multicast source pruning ixgbevfcleanrxirq prunes frames who...
The vulnerability of the kexec module in the Linux operating system allows a hacker to trigger a system failure.
The vulnerability of the kexec module in the Linux operating system is related to a deficiency in the mechanism for verifying the source of the code. Exploiting this vulnerability can allow an attacker to cause a system failure...
Progress MOVEit Transfer < 2025.0.7 / 2025.1.x < 2025.1.3 Multiple Vulnerabilities
The version of Progress MOVEit Transfer installed on the remote host is prior to 2025.0.7 or 2025.1.x prior to 2025.1.3. It is, therefore, affected by multiple vulnerabilities, including: - Improper Neutralization of Special Elements in Data Query Logic vulnerability in Progress MOVEit Transfer...
PT-2026-73227
Permission control vulnerability in the Wi-Fi enhancement module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-50769
The CRM+ application before and including version 2025.6 from Brainformatik is vulnerable to SQL Injection time-based vulnerability. The check conflict endpoint index.php?module=Appointments&action=CheckConflictOfDates&ajaxSkipHeader=true which is used to check any conflicts for user calendar is...
Important: kernel6.12
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clear Present bit before tearing down context entry CVE-2026-45944 In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: take vmappurgelock in shrinker CVE-2026-46093 In the...
The vulnerability of the nft_add_set_elem() function in the net/netfilter/nf_tables_api.c kernel module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the nftaddsetelem function in the net/netfilter/nftablesapi.c kernel module of the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
Important: pcp
Issue Overview: A flaw in the PCP linuxsockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root. CVE-2026-16526 A signed integer overflow in the PCP pmGetPDU function can be...
PT-2026-73224
Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability...
PT-2026-76781
Name of the Vulnerable Software and Affected Versions FreeCAD versions prior to 1.1.2 Description An issue exists in the PropertyPythonObject::Restore function within src/App/PropertyPythonObject.cpp where the software passes an attacker-controlled module attribute from serialized...