Improper Control of Dynamically-Managed Code Resources

Overview org.webjars.npm:vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Improper Control of Dynamically-Managed Code Resources due to the unsafe usage of the .call with globalPromise.prototype.then callbac...

CVE-2026-1428

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...

CVE-2026-1428

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...

CVE-2026-1427

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...

CVE-2026-1428

CVE-2026-1428 concerns WellChoose’s Single Sign-On Portal System. The connected documents describe an OS Command Injection vulnerability that allows authenticated remote attackers to inject arbitrary OS commands and execute them on the server. The advisories do not publicly provide exact affected...

EUVD-2026-4707

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...

CVE-2026-1427

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...

macOS Mavericks 10.9 Local Privilege Escalation Tooling

This is not an exploit but rather a theoretical ROP chain construction framework for macOS Mavericks 10.9 that is inspired by older research...

WellChoose Single Sign-On Portal System: Operating System Command Injection Vulnerability

WellChoose Single Sign-On Portal System is a single-sign-on portal system developed by WellChoose in Taiwan, China. The WellChoose Single Sign-On Portal System has a vulnerability related to operating system command injection. This vulnerability stems from the presence of OS command injection,...

Apple Security Update: iOS 26.2.1 and iPadOS 26.2.1

Apple recommends to install security update iOS 26.2.1 and iPadOS 26.2.1 on devices iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later...

Important Photon OS Security Update - PHSA-2026-5.0-91-0745

Updates of 'linux', 'linux-esx' packages of Photon OS have been released...

CVE-2025-67264

An OS command injection vulnerability in the com.sprd.engineermode component in Doogee Note59, Note59 Pro, and Note59 Pro+ allows a local attacker to execute arbitrary code and escalate privileges via the EngineerMode ADB shell, due to incomplete patching of CVE-2025-31710...

ALGO 8180 IP Audio Alerter: Operating System Command Injection Vulnerability

ALGO 8180 IP Audio Alerter is an IP speaker developed by ALGO Corporation. The ALGO 8180 IP Audio Alerter has a vulnerability related to operating system command injection. This vulnerability stems from the lack of validation for user input strings in the web-based interface, which may lead to...

The vulnerability of the WifiScanModeActivity.java file in the Android operating system allows a hacker to increase their privileges.

The vulnerability of the WifiScanModeActivity.java file in the Android operating system is related to the lack of authentication. Exploiting this vulnerability can allow a hacker to gain increased privileges...

GitHub Kanban MCP Server: Operating System Command Injection Vulnerability

GitHub Kanban MCP Server is an application developed by Maki, a personal developer. The GitHub Kanban MCP Server has a vulnerability related to operating system command injection. This vulnerability arises from executing system calls without validating user input when processing the createissue...

The vulnerability of the net/mlx5e component in the Mellanox Ethernet adapter driver for Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the net/mlx5e driver for Mellanox Ethernet adapter devices in Linux operating systems relates to the reutilization of previously released memory. Exploiting this vulnerability can allow attackers to cause service failures...

CVE-2025-67264

An OS command injection vulnerability exists in the com.sprd.engineermode component on Doogee Note59 , Note59 Pro , and Note59 Pro+ smartphones. This flaw allows a local attacker to execute arbitrary code and escalate privileges via the EngineerMode ADB shell . The root cause is attributed to the...

PT-2026-4525

Name of the Vulnerable Software and Affected Versions Doogee Note59 Doogee Note59 Pro Doogee Note59 Pro+ affected versions not specified Description A flaw exists within the com.sprd.engineermode component that could allow a local attacker to execute arbitrary code and escalate privileges. This i...

Linux Distros Unpatched Vulnerability : CVE-2026-1299

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The email module, specifically the BytesGenerator class, didn't properly quote newlines for email headers when serializing an email message allowing for header...

ALGO 8180 IP Audio Alerter: Operating System Command Injection Vulnerability

ALGO 8180 IP Audio Alerter is an IP speaker developed by ALGO Corporation. The ALGO 8180 IP Audio Alerter has a vulnerability related to operating system command injection. This vulnerability stems from the lack of validation for user input strings in the web-based interface, which may lead to...