command-line interface (CLI) of Security Bypass

The vulnerability of the command-line interface CLI of TP-Link Wi-Fi router microprogramming systems such as Archer NX200, NX210, NX500, and NX600 is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a remo...

ClamAV Insufficient Validation

The vulnerability of the ClamAV antivirus software is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

D-Link R95 Router Code Execution

The vulnerability of the /bin/ssi file of the DHMAPI component in D-Link R95 router microprogramming software is related to the lack of measures taken to neutralize special elements in the NTPServer parameters. Exploiting this vulnerability allows a remote attacker to execute arbitrary code,...

Open Interface Service Web Module Privilege Escalation

The vulnerability of the Open Interface Service in the web module of the Siemens Siveillance Control video surveillance and security management software is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to enhance their privileges and...

Azure SQL Database SQL Injection

The vulnerability of the Azure SQL Database cloud relational database model is related to the lack of security measures for SQL query structures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

Crosswork Data Gateway Auth Bypass

The vulnerability of the Crosswork Data Gateway data collection platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected informatio...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the adisinit function in the drivers/iio/imu/adis.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the stratix10rsuprobe function in the drivers/firmware/stratix10-rsu.c file of the Linux kernel firmware driver is related to the pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Panthor driver Heap Buffer Overflow DoS

The vulnerability of the groupreleasework function in the drivers/gpu/drm/panthor/panthorsched.c module of the Panthor driver which provides DRM support for ARM Mali CSF-based graphics processors in the Linux operating system is related to the reutilization of previously released memory. Exploiti...

Azure Arc Authentication Privilege Escalation

The vulnerability of the Azure Arc local infrastructure connection software relates to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain increased privileges remotely...

PT-2026-103080

Name of the Vulnerable Software and Affected Versions EasyFlow .NET affected versions not specified Description Missing authentication allows unauthenticated remote attackers to obtain the plaintext passwords of other users through a specific API endpoint. Recommendations At the moment, there is ...

PT-2026-103104

Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorrect reads or writes, or to corruption of internal memory structures. An authenticated remote attacker with monitoring access can exploit...

PT-2026-103119

The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate upper limit. An unauthenticated remote attacker controlling a malicious gateway can exploit this behavior to trigger excessive memory consumption, resulting in a...

PT-2026-103078

Name of the Vulnerable Software and Affected Versions EasyFlow .NET affected versions not specified Description An SQL Injection flaw allows authenticated remote attackers to inject arbitrary SQL commands, enabling them to read sensitive database contents. Recommendations At the moment, there is ...

CVE-2026-103104: Reachable Assertion

Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation which allows a remote attacker to trigger a software abort resulting in a denial of service...

CVE-2026-102906: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was identified in 0xshariq github-mcp-server up to 52e764a7d66eac1726fce02ca7bb5a638571801a. This issue affects the function childprocess.exec of the file src/github.ts of the component Git Remove MCP Tool. Such manipulation of the argument File leads to os command injection. The...

PT-2026-103272

Name of the Vulnerable Software and Affected Versions GraphicsMagick versions prior to 1.3.48 Description The WPG File Handler component contains a flaw in the ExtractPostscript function within the coders/wpg.c file. A remote attacker can trigger uncontrolled recursion through specific...

CVE-2024-58387: Improper Limitation of a Pathname to a Restricted Directory

Inspur Haiyue HCM Cloud contains an arbitrary file read vulnerability in the /api/modelreport/file/download endpoint that allows unauthenticated remote attackers to read arbitrary files by supplying unvalidated path parameters index and ext. Attackers can craft requests such as...

CVE-2026-103387: Uncaught Exception

A weakness has been identified in garycourt uri-js up to 4.4.1. This affects the function URI.parse of the file src/schemes/mailto.ts of the component Mailto Header Handler. This manipulation of the argument to causes uncaught exception. The attack may be initiated remotely. The exploit has been...

CVE-2026-103475: Active Debug Code

yii2-starter-kit through 4.2.0 exposes the Yii debug and Gii modules to all IP addresses by setting allowedIPs to '' in its default development configuration. Unauthenticated remote attackers can access the debug endpoint to read sensitive data including session cookies and database queries, or...