EUVD-2023-25645

Access of Memory Location After End of Buffer vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to access protected data...

CVE-2026-24346

Use of well-known default credentials in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to access protected areas in the web application...

ROS-20260128-73-0025

A vulnerability in the Linux operating system kernel is related to a pointer dereferencing bug. Exploitation of the vulnerability could allow an attacker acting remotely to affect the availability of protected information...

Vivotek IP7137 Path Traversal

The vulnerability of Vivotek IP7137 micro-programmed software cameras is related to incorrect restrictions on the path name to the restricted access directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

SEV-SNP Data Compromise

The vulnerability of the SEV-SNP security mechanism implemented in AMD’s graphics processors is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

Vivotek IP7137 RTSP Unauthorized Access

The vulnerability of the Real-Time Streaming Protocol RTSP implementation of Vivotek IP7137 software-based IP cameras is related to the absence of authentication for a critical function. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to...

CVE-2025-15523

A flaw was found in the MacOS version of Inkscape. This issue allows a local attacker to bypass Transparency, Consent, and Control TCC permissions by invoking the bundled Python interpreter with arbitrary commands or scripts. This enables unauthorized access to user files in privacy-protected...

CVE-2026-24346

Use of well-known default credentials in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to access protected areas in the web application...

CVE-2026-24346

Use of well-known default credentials in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to access protected areas in the web application...

EUVD-2026-4823

Use of well-known default credentials in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to access protected areas in the web application...

CVE-2026-24346 Use of well-known default credentials in EZCast Pro II Dongle

Use of well-known default credentials in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to access protected areas in the web application...

CVE-2026-24346

Use of well-known default credentials in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to access protected areas in the web application...

CVE-2026-24346

CVE-2026-24346 affects EZCast Pro II Admin UI. The issue is the use of well-known default credentials in Admin UI of EZCast Pro II, version 1.17478.146, which can allow attackers to access protected areas of the web application. Root cause: default credentials remain unchanged in the Admin UI, en...

EZCast Pro II security vulnerabilities

EZCast Pro II is a computer screen-sharing software developed by EZCast Corporation in China. This software allows for wireless sharing of data from computer devices onto televisions or projection screens. EZCast Pro supports screen allocation and projection permissions. Version 1.17478.146 of...

Microsoft Copilot Studio Data Cleaning Disclosure

The vulnerability of Microsoft Copilot Studio’s graphical tool for creating and supporting artificial intelligence is related to the lack of data cleansing measures at the control level. Exploiting this vulnerability can allow a remote attacker to disclose protected information...

Microsoft 365 Copilot Disclosure

The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant is related to improper validation of the specified type of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

PT-2026-4881

Name of the Vulnerable Software and Affected Versions EZCast Pro II version 1.17478.146 Description The Admin UI of EZCast Pro II utilizes well-known default credentials, potentially allowing attackers to gain access to protected areas within the web application. Recommendations Change the defaul...

Oracle VM VirtualBox Unauthorized Access

The vulnerability of the Core component in Oracle VM VirtualBox is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2025-6461

The CubeWP – All-in-One Dynamic Content Framework plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.1.27 via the search feature in class-cubewp-search-ajax-hooks.php due to insufficient restrictions on which posts can be included. This makes it...

Qfiling Automatic File Organization Path Traversal

The vulnerability of Qfiling’s automatic file organization and sorting software is related to incorrect restrictions on path names to the catalog. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...