PT-2026-91400

MikroTik RouterOS before 7.23.4 long-term and 7.24.2 stable contains a stack-based buffer overflow vulnerability in the mtget binary's TFTP RRQ builder function that allows authenticated users to crash the mtget worker process by supplying a URL path of 507 bytes or more to the /tool fetch comman...

PT-2026-91710

A security flaw has been discovered in netease-youdao LobsterAI 2026.6.15/2026.8.28/2026.9.3/2026.9.4. Impacted is the function OpenClawConfigSync.buildBrowserConfig of the file src/main/libs/openclawConfigSync.ts of the component Browser Network Configuration. The manipulation results in...

PT-2026-91004

A vulnerability was identified in GPAC up to f1219cde. Affected is the function gf sm dump command list of the file scene manager/scene dump.c of the component MP4Box. The manipulation leads to reachable assertion. The attack must be carried out locally. The exploit is publicly available and migh...

Medium: cups-filters

Issue Overview: A flaw was found in libcupsfilters and cups-filters. The PNG image reading function creates a libpng reader without installing an error recovery handler, causing the CUPS image filter process to abort when processing a malformed PNG file. An unauthenticated attacker could exploit...

PT-2026-90995

A vulnerability was detected in Totolink A3002MU Hh-B20211125.1046. Impacted is the function formNewSchedule of the file /boafrm/formNewSchedule of the component boa. The manipulation of the argument submit-url results in buffer overflow. The attack may be performed from remote. The exploit is no...

Important: freerdp

Issue Overview: FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, an authenticated RDP client can advertise DVI ADPCM with nBlockAlign equal to 8 and nChannels equal to 2 to make the bs calculation in rdpsndserverselectformat in channels/rdpsnd/server/rdpsndmain.c...

PT-2026-91173

A vulnerability was identified in Gitlawb openclaude up to 0.30.0. Impacted is the function waitForCallback of the file src/services/api/xaiOAuthCallback.ts of the component xAI OAuth Callback Handler. The manipulation of the argument Error leads to denial of service. Remote exploitation of the...

PT-2026-91158

A security flaw has been discovered in Open5GS up to 2.7.x. Affected is the function amf nnrf try old amf discovery fallback of the file src/amf/nnrf-handler.c of the component Old AMF Discovery Fallback. The manipulation of the argument discovery option results in use after free. The attack may ...

PT-2026-91234

Description The DRPC server kept a map from function name to request queue and created an entry the first time a function name was seen. No code path ever removed an entry: request cleanup removed the request from its queue, and the shutdown path drained queues, but the queue object and its map...

PT-2026-91220

A vulnerability was identified in Soarkey StudentManagement up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. Affected is the function RegisterServlet.doPost of the file code/WebContent/register.html of the component Registration Workflow. Such manipulation of the argument level leads to improper...

PT-2026-91219

A vulnerability was determined in Dvidelabs flatcc up to 0.6.3. This impacts the function align order members of the file src/compiler/semantics.c of the component Duplicate Symbol Handler. This manipulation causes reachable assertion. The attack can be initiated remotely. The exploit has been...

PT-2026-91201

A vulnerability has been found in Dvidelabs flatcc up to 0.6.3. The impacted element is the function fb clear parser of the file src/Compiler/semantics.c. The manipulation leads to memory leak. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be...

CVE-2023-24284

Portable Puzzle Collection (sgt-puzzles) versions before 20230116.5782e29 contain a buffer overflow in the Guess puzzle , triggered via the is_markable() function when processing a crafted save file . The vulnerability was fixed upstream in commit 5279fd2, but Ubuntu reports no vendor-supplied pa...

PT-2026-91413

A vulnerability was detected in cosmicstack-labs mercury-agent up to 1.1.13. Affected is the function checkShellCommand of the file src/capabilities/permissions.ts of the component Shell Command Execution. The manipulation results in incorrect behavior order: validate before canonicalize. The...

PT-2026-91417

The ITE it82xx2 USB device-controller driver initialized its bus-suspend detection work with k work init delayable&priv-suspended work, suspended handler inside it82xx2 enable the driver's .enable op in drivers/usb/udc/udc it82xx2.c. This work item is scheduled essentially continuously while the...

PT-2026-91406

A weakness has been identified in cosmicstack-labs mercury-agent up to 1.2.0. This affects the function PermissionManager.checkShellCommand of the file mercury-agent/src/capabilities/permissions.ts of the component Shell Permission Manifest. Executing a manipulation can lead to information...

PT-2026-91446

A security flaw has been discovered in D-Link DI-8400 16.07. This affects the function ddns asp of the file /ddns.asp of the component DDNS Configuration. Performing a manipulation of the argument serv/user/host/wild/mx/bmx/cust/ip results in stack-based buffer overflow. The attack can be initiat...

The vulnerability of the Azure AI Language Authoring service lies in the lack of authentication for critical functions, allowing attackers to escalate their privileges.

The vulnerability of Azure AI Language Authoring lies in the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...

PT-2026-91255

A vulnerability has been found in GPAC up to f1219cde. Impacted is the function gf node get name of the file scenegraph/base scenegraph.c of the component MP4Box. Such manipulation leads to use after free. The attack may be performed from remote. The exploit has been disclosed to the public and m...

PT-2026-91251

A flaw has been found in GPAC up to f1219cde. This issue affects the function gf node list get child of the file scenegraph/base scenegraph.c of the component MP4Box. This manipulation of the argument Target causes null pointer dereference. The attack is possible to be carried out remotely. The...