PT-2026-7191

Name of the Vulnerable Software and Affected Versions Tanium Endpoint Configuration Toolset Solution affected versions not specified Tanium End-User Notifications Endpoint Tools affected versions not specified Description Tanium addressed a flaw that allows for arbitrary file deletion...

PT-2026-7002

Name of the Vulnerable Software and Affected Versions D-Link DWR-M921 version 1.1.50 Description A flaw exists in D-Link DWR-M921 version 1.1.50 that allows for command injection. The issue stems from manipulating the fota url argument within the file /boafrm/formLtefotaUpgradeFibocom. This...

PT-2026-7004

Name of the Vulnerable Software and Affected Versions code-projects Online Application System for Admission version 1.0 Description A flaw exists in the Login Endpoint of the Online Application System for Admission. This issue, related to SQL injection, affects the enrollment/index.php file...

PT-2026-7009

Name of the Vulnerable Software and Affected Versions SourceCodester Prison Management System version 1.0 Description A session fixation issue exists in the Login component of the software. The issue is triggered through manipulation of an unknown function within the Login component and can be...

PT-2026-7015

Name of the Vulnerable Software and Affected Versions Great Developers Certificate Generation System affected versions not specified Description A security issue exists in Great Developers Certificate Generation System. The issue involves unrestricted upload due to manipulation of the file...

PT-2026-7024

Name of the Vulnerable Software and Affected Versions Tenda AC9 version 15.03.06.42 multi Description A flaw exists in the Tenda AC9 device. The formGetDdosDefenceList function is susceptible to a stack-based buffer overflow when the security.ddos.map argument is manipulated. This issue can be...

PT-2026-6984

Name of the Vulnerable Software and Affected Versions Tenda RX3 version 16.03.13.11 Description A stack-based buffer overflow exists in the set qosMib list function located in the /goform/formSetQosBand file. Manipulation of arguments to this function can trigger the overflow, allowing for remote...

PT-2026-7025

Name of the Vulnerable Software and Affected Versions Tenda AC9 version 15.03.06.42 multi Description A security issue exists in the function formGetRebootTimer of Tenda AC9 routers. Manipulation of the arguments sys.schedulereboot.start time/sys.schedulereboot.end time can lead to a stack-based...

PT-2026-6992

Name of the Vulnerable Software and Affected Versions itsourcecode Directory Management System version 1.0 Description A flaw exists in itsourcecode Directory Management System that allows for remote code execution. The issue is located within the /admin/forget-password.php file. Specifically,...

PT-2026-6997

Name of the Vulnerable Software and Affected Versions code-projects Online Reviewer System version 1.0 Description A security issue exists in code-projects Online Reviewer System 1.0 related to SQL injection. The issue is located in the Login component, specifically within the file...

PT-2026-6986

Name of the Vulnerable Software and Affected Versions Tenda AC8 version 16.03.33.05 Description A buffer overflow issue exists in the Embedded Httpd Service component of Tenda AC8. The flaw is located in the file '/goform/fast setting wifi set' and is triggered by manipulating the timeZone...

PT-2026-6883

Name of the Vulnerable Software and Affected Versions yeqifu warehouse affected versions not specified Description A security issue exists in yeqifu warehouse related to improper authorization. The issue is present in the addRole, updateRole, and deleteRole functions within the RoleController.jav...

PT-2026-6899

Name of the Vulnerable Software and Affected Versions D-Link DIR-823X version 250416 Description A flaw exists in D-Link DIR-823X version 250416 that allows remote attackers to execute operating system commands. This occurs due to a command injection in an unknown function within the /goform/set...

PT-2026-6897

Name of the Vulnerable Software and Affected Versions yeqifu warehouse affected versions not specified Description A flaw exists that can lead to improper authorization. The issue affects the addMenu, updateMenu, and deleteMenu functions within the MenuController.java file located in the...

PT-2026-6884

Name of the Vulnerable Software and Affected Versions yeqifu warehouse affected versions not specified Description A security issue exists in yeqifu warehouse related to improper authorization. The issue is located within the Permission Management component, specifically in the addPermission,...

PT-2026-6697

Name of the Vulnerable Software and Affected Versions affected versions not specified Description An issue exists in the communication module that involves reading memory incorrectly. Successful exploitation of this issue may affect system availability. Recommendations At the moment, there is no...

PT-2026-6817

Name of the Vulnerable Software and Affected Versions SpotFTP-FTP Password Recover version 2.4.8 Description The software contains a denial of service issue that allows attackers to crash the application. This is achieved by triggering a large buffer overflow. An attacker can create a text file...

PT-2026-6816

Name of the Vulnerable Software and Affected Versions aSc TimeTables version 2020.11.4 Description The application can be crashed, leading to a denial of service, by overwriting the Subject title field with a large buffer. An attacker can generate a 1000-character buffer and paste it into the...

PT-2026-6813

Name of the Vulnerable Software and Affected Versions Cyberoam Authentication Client version 2.1.2.7 Description The Cyberoam Authentication Client software contains a buffer overflow issue that enables remote attackers to run code without permission by overwriting Structured Exception Handler SE...

PT-2026-6723

Name of the Vulnerable Software and Affected Versions ESET Management Agent affected versions not specified Description A local privilege escalation issue exists due to insecure temporary batch file execution. This allows for potential unauthorized access to system resources. Recommendations At t...