97 matches found
CVE-2026-69563
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
CVE-2026-68876
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network...
CVE-2026-68874
CVE-2026-68874 is an out-of-bounds read vulnerability in the Windows Program Compatibility Assistant Service that allows an authorized attacker with low privileges to disclose information over a network. The vulnerability requires user interaction and results in a High confidentiality impact with...
EUVD-2026-73408
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network...
Windows Program Compatibility Assistant Service Information Disclosure Vulnerability
Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally...
PT-2026-87569
Name of the Vulnerable Software and Affected Versions Windows Program Compatibility Assistant Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows Program Compatibility Assistant Service. This issue allows an authorized attacker to elevate...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100330)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100330 advisory. In the Linux kernel, the following vulnerability has been resolved: atm: fore200e: fix use-after-free in tasklets during device removal When the PCA-200E or SBA-200E...
CVE-2026-43203
In the Linux kernel, the following vulnerability has been resolved: atm: fore200e: fix use-after-free in tasklets during device removal When the PCA-200E or SBA-200E adapter is being detached, the fore200e is deallocated. However, the txtasklet or rxtasklet may still be running or pending, leadin...
Linux Distros Unpatched Vulnerability : CVE-2026-43203
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - atm: fore200e: fix use-after-free in tasklets during device removal When the PCA-200E or SBA-200E adapter is being detached, the fore200e is deallocated. Howeve...
ACORN-IDS: Adaptive Continual Novelty Detection for Intrusion Detection Systems
Intrusion Detection Systems IDS must maintain reliable detection performance under rapidly evolving benign traffic patterns and the continual emergence of cyberattacks, including zero-day threats with no labeled data available. However, most machine learning-based IDS approaches either assume...
EUVD-2015-1155
Malware in sbrugna...
EUVD-2015-3989
Malware in sbrugna...
EUVD-2015-7807
Malware in sbrugna...
EUVD-2022-43496
Malicious code in bioql PyPI...
RedCurl Cybercrime Group Abuses Windows PCA Tool for Corporate Espionage
The Russian-speaking cybercrime group called RedCurl is leveraging a legitimate Microsoft Windows component called the Program Compatibility Assistant PCA to execute malicious commands. "The Program Compatibility Assistant Service pcalua.exe is a Windows service designed to identify and address...
pca.com Cross Site Scripting vulnerability OBB-3223040
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
WordPress PCA Predict Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2022-40195
Authenticated admin+ Stored Cross-Site Scripting XSS vulnerability in PCA Predict plugin = 1.0.3 at WordPress...
