PT-2026-3200

Impact The ERC7984 contract tracks total supply using a confidential euint64 value. If a call to the internal mint function would result in the total supply overflowing, the call fails silently. The wrap and onTransferReceived functions in ERC7984ERC20Wrapper assume that mint won't fail silently...

PT-2026-1245

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc7-CI DRM 17270-g7644974e648c+ Description The Linux kernel drm/vgem-fence subsystem contained a flaw where a timer used to expire a vgem fence could lead to a deadlock. This occurred when the timer expir...

Fedora: Security Advisory (FEDORA-2026-acea06489d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for ppp (EulerOS-SA-2026-1002)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2026-1253

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the mt7615 mcu wtbl sta add function within the mt76 module. Specifically, an skb sskb is allocated, and if mt76 connac mcu alloc wtbl req subsequently fails, the...

CVE-2026-0574

A weakness has been identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function saveUserRole of the file warehouse\src\main\java\com\yeqifu\sys\controller\UserController.java of the component Request Handler. This manipulation causes improper...

CVE-2026-0574

A weakness has been identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function saveUserRole of the file warehouse\src\main\java\com\yeqifu\sys\controller\UserController.java of the component Request Handler. This manipulation causes improper...

CVE-2026-0574 yeqifu warehouse Request UserController.java saveUserRole improper authorization

A weakness has been identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function saveUserRole of the file warehouse\src\main\java\com\yeqifu\sys\controller\UserController.java of the component Request Handler. This manipulation causes improper...

Fedora 43 : gnupg2 (2026-acea06489d)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-acea06489d advisory. New upstream release 2.4.9 fixing several vulnerabilities Tenable has extracted the preceding description block directly from the Fedora security...

golang-cicd-poc

Golang CI/CD POC Project POC project for trying out different...

CVE-2025-62852

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: Q...

BIT-GITEA-2025-68938

Gitea before 1.25.2 mishandles authorization for deletion of releases...

[SECURITY] Fedora 43 Update: nginx-mod-vts-0.2.4-4.fc43

Nginx virtual host traffic status module...

PT-2026-37523

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak exists in the cx25821 dev setup function. The issue occurs when ioremap fails, preventing the release of the memory region previously obtained by cx25821 get resources...

CVE-2025-64123 Nuvation Energy Multi-Stack Controller Proxy service allows arbitrary BMS access

Unintended Proxy or Intermediary vulnerability in Nuvation Energy Multi-Stack Controller MSC allows Network Boundary Bridging.This issue affects Multi-Stack Controller MSC: through and including release 2.5.1...

CVE-2026-0571

CVE-2026-0571 affects yeqifu warehouse. The vulnerability is in AppFileUtils.java: createResponseEntity, where improper handling of the path argument enables path traversal. The issue can be exploited remotely, and public PoC/ exploits have been published. No version details are provided for affe...

CVE-2025-52863

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following versions: QTS...

CVE-2025-15432

The CVE-2025-15432 issue affects yeqifu carRental, specifically the function downloadShowFile in /file/downloadShowFile.action of the com.yeqifu.sys.controller.FileController. The root cause is path traversal caused by manipulation of the path argument, allowing remote exploitation. Several sourc...

GNU Privacy Guard 2.4.9

GnuPG the GNU Privacy Guard or GPG is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440. As suc...

PT-2026-1081

Name of the Vulnerable Software and Affected Versions QNAP versions prior to 5.2.7.3256 build 20250913 Description A flaw exists where a remote attacker, having obtained administrator privileges, could trigger a denial-of-service DoS condition through a NULL pointer dereference. Recommendations...