PT-2026-47186

Please update...

PT-2026-44176

This vulnerability in Veeam Service Provider Console allows for remote code execution...

PT-2026-47091

Name of the Vulnerable Software and Affected Versions crun affected versions not specified Description Security issues were identified and subsequently resolved in the software. Recommendations Update to version 1.28-1.1...

PT-2026-47220

Name of the Vulnerable Software and Affected Versions Twig affected versions not specified Description An issue exists where a sandboxed template author can trigger a disallowed toString method on objects reachable from the render context, bypassing the security policy. This occurs through two...

PT-2026-47207

Name of the Vulnerable Software and Affected Versions Twig PHP templating engine affected versions not specified Description An allow-list bypass exists within the Sandbox filter, tag, and function mechanisms, which could allow an attacker to execute unauthorized actions by circumventing the...

OSV-2026-795 Stack-buffer-underflow in probe_dasd_pt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=514896889 Crash type: Stack-buffer-underflow READ 1 Crash state: probedasdpt idinfoprobe partitionsprobe...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ptdma: A check for a null descriptor is performed before calling ptcmdcallback. This issue resolves a panic that can occur on AMD systems, typically during host shutdown, after the PTDMA driver has been exercised. The...

PT-2026-42195

Name of the Vulnerable Software and Affected Versions InfoScale VIOM version 9.1.3 Description Cross-site Scripting XSS is possible in the software. XSS is a type of security flaw that allows an attacker to inject malicious scripts into web pages viewed by other users. Recommendations At the...

PT-2026-42171

Name of the Vulnerable Software and Affected Versions Twig affected versions not specified Description The spaceless filter is registered with is safe = 'html', causing Twig's autoescaper to skip escaping its output in HTML contexts. This allows attacker-controlled input containing markup to be...

PT-2026-42030

Name of the Vulnerable Software and Affected Versions OpenMcdf versions prior to 3.1.4 Description A denial of service occurs when processing a specially crafted Compound File Binary CFB file. The issue resides in the BST name-lookup loop within the DirectoryTree.TryGetDirectoryEntry function,...

PT-2026-41927

Name of the Vulnerable Software and Affected Versions Thunderbird version 150 Firefox version 150 Description Memory safety bugs involving memory corruption may allow an attacker to execute arbitrary code. Recommendations Update Thunderbird to version 151. Update Firefox to version 151...

PT-2026-41625

CVE-2025-70562 Full disclosure https://t.co/TDa8tFYvC3 Don't wait vulnerability scanning results: https://t.co/oh1APvMMnd...

PT-2026-41624

CVE-2025-70561 Full disclosure https://t.co/wAYBU7dfkD...

PT-2026-41037

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

PT-2026-40777

Content removed...

CVE-2026-31232

The CosyVoice project thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e 2025-30-21 contains an insecure deserialization vulnerability CWE-502 in its model loading process. When loading model files .pt from a user-specified directory via the --modeldir argument, the code uses torch.load without...

PT-2026-40549

Name of the Vulnerable Software and Affected Versions UltraJSON versions prior to 5.12.1 Description A memory leak occurs when the ujson.dump function writes to a file-like object and the write operation raises an exception. The objToJSONFile function allocates a Python string object but fails to...

PT-2026-39916

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description Details regarding this Server-Side Request Forgery SSRF issue will be published at disclosure. Recommendations At the moment, there is no information about a newer version that...

PT-2026-40389

Name of the Vulnerable Software and Affected Versions Archon OS affected versions not specified Description A flaw in the local API handling allows unauthenticated attackers to perform a web-to-client attack. By inducing a user to visit a malicious website, an attacker can bypass Cross-Origin...

CosyVoice 安全漏洞

CosyVoice is an open-source voice generation and AI voice cloning platform developed by FunAudioLLM. There was a security vulnerability in the previous version of CosyVoice, which stemmed from the data processing tool makeparquetlist.py using torch.load to load .pt files without enabling the...