CVE-2026-57244

After JavaScript resetting the form, the synchronization process lacks re-entry protection and object lifecycle verification, resulting in the failure of the control pointer during the traversal process. After the pointer fails, it still continues to dereference, causing the application to crash...

CVE-2026-46406

Claude Code is an agentic coding tool. From 2.1.59 until 2.1.128, the Claude Code /copy command wrote responses to a hardcoded, predictable path /tmp/claude/response.md without UID isolation, randomness, or symlink protection. The file was created world-readable 0644 in a world-traversable...

TOTOLINK A7100RU Router Command Execution

The vulnerability of the setSyslogCfg function in the cgi-bin/cstecgi.cgi script of the TOTOLINK A7100RU router’s microprogramming system is related to the lack of measures taken to protect data at the management level. Exploiting this vulnerability could allow a malicious actor to execute...

OpenSky Flight Planning SQL Injection

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the id parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

Brute Force

Overview Affected versions of this package are vulnerable to Brute Force due to the lack of password policy and brute-force protection in the authentication process. An attacker can gain unauthorized access to user accounts by performing automated brute-force attacks. Remediation Upgrade...

CVE-2024-54851

Teedy = 1.12 is vulnerable to Cross Site Request Forgery CSRF, due to the lack of CSRF protection...

DNN CMS XSS

Vulnerability of the DNN CMS system’s /Activity-Feed/userId/userid endpoint: no measures taken to protect the website structure. Exploitation of this vulnerability allows a malicious actor to perform XSS attacks remotely...

Adobe Experience Manager XSS

The vulnerability of the Adobe Experience Manager content and media data management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks...

PT-2023-27662 · Unknown · Opencart Cms

Name of the Vulnerable Software and Affected Versions: OpenCart CMS version 4.0.2.2 Description: The issue is related to a lack of protection against excessive login attempts on the login page, allowing unauthenticated attackers to perform a brute force attack to gain access to the application...

Python Redis Library Unauthorized Access

The vulnerability of the Python Redis library, redis-py, is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

USB Serial Driver Unauthorized Access

The vulnerability of the USB Serial Driver driver for the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential information...

OTRS Ticket Request System XSS

The vulnerability of the OTRS ticket request system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

Microsoft Windows Defender Unauthorized Access

The vulnerability of Microsoft Windows Defender operating system lies in the lack of protection for service data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

solid-state storage devices like Privilege Escalation

The vulnerability of Intel SSD microprogramming software is related to the lack of protection for operational data. Exploiting this vulnerability can allow attackers to enhance their privileges and gain unauthorized access to protected information...

GitLab XSS

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using specially created links...

CVE-2019-4291

IBM Maximo Anywhere 7.6.4.0 could allow an attacker to reverse engineer the application due to the lack of binary protection precautions. IBM X-Force ID: 160697...

Intel SSD Storage Software Unauthorized Access

The vulnerability of microprogrammed solid-state storage devices like Intel SSDs lies in the lack of protection for operational data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

Tricon Communications Module Info Disclosure

The vulnerability of the Tricon Communications Module is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

Oracle VM VirtualBox Core Component Data Compromise

The vulnerability of the Core component of the Oracle VM VirtualBox software relates to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

HECI Subsystem Disclosure

The vulnerability of the HECI microprogramming software’s subsystem, including Intel Converged Security and Manageability Engine and Intel Server Platform Services, is related to the lack of protection for operational data. Exploiting this vulnerability can allow attackers to disclose sensitive...