CVE-2026-112030

A vulnerability was found in diem-project diem up to 5.1.3. This vulnerability affects unknown code of the file dmCorePlugin/lib/data/dmDataLoad.php. Performing a manipulation results in use of default password. The attack is possible to be carried out remotely. The exploit has been made public a...

CVE-2026-109149

A weakness has been identified in beautifier js-beautify up to 1.15.1/2.0.3. The affected element is an unknown function. Executing a manipulation can lead to uncontrolled memory allocation. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not...

CVE-2026-108789

A vulnerability exists in deepseek-ai deepseek-harness up to version 0.1.1-rc.2 . The flaw specifically affects the agent function within the dsh-workflow-worker-thread component. The root cause involves improper enforcement of behavioral workflow and business logic errors (CWE-841, CWE-840), whi...

EUVD-2026-96928

A security flaw has been discovered in FunnyWolf Viper up to 3.1.11. The affected element is an unknown function of the file /root/viper/.git/config. Performing a manipulation results in hard-coded credentials. Remote exploitation of the attack is possible. The exploit has been released to the...

PT-2026-105827

A vulnerability was determined in BerriAI litellm up to 1.82.2. This affects the function json.dumps of the file litellm/proxy/management endpoints/ui sso.py of the component SSO Debug Flow. Executing a manipulation can lead to missing authentication. The attack can be executed remotely. The...

PT-2026-102418

Name of the Vulnerable Software and Affected Versions OpenDMARC versions prior to 1.4.3 Description A flaw in the SPF Macro Handler component allows for improper authentication via remote manipulation. The issue resides in the opendmarc sp2 find mailfrom domain function within the...

CVE-2026-101015

A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is some unknown functionality of the file policy.c of the component Domain Handler. Executing a manipulation can lead to improper validation of unsafe equivalence in input. The attack may be launched...

PT-2026-99944

A flaw has been found in ag-ui-protocol ag-ui up to 2026-09-07. This vulnerability affects the function FilterToolCallsMiddleware of the file sdks/typescript/packages/client/src/middleware/filter-tool-calls.ts of the component Middleware. Executing a manipulation can lead to incomplete cleanup. T...

PT-2026-102403

Name of the Vulnerable Software and Affected Versions OpenDKIM versions prior to 2.11.1 Description A security flaw exists in the Tag Tokenizer component within the dkim process set function of the dkim.c file. A remote attacker can perform a manipulation that results in the use of a less trusted...

PT-2026-99436

Name of the Vulnerable Software and Affected Versions coollabsio Coolify versions prior to 4.2.0 Description A flaw in the Route-Level Middleware component, specifically within a function in the app/Http/Middleware/CanUpdateResource.php file, allows for remote manipulation. This issue can lead to...

PT-2026-98338

Name of the Vulnerable Software and Affected Versions ningzichun student-management-system versions up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf Description A flaw exists in the example lite.sql file that allows a remote attacker to execute a manipulation leading to the use of default...

PT-2026-97552

Name of the Vulnerable Software and Affected Versions sfturing hosp order versions up to 627f426331da8086ce8fff2017d65b1ddef384f8 Description A remote manipulation of the getProperties function within the ssm pro/src/main/java/cn/sfturing/utils/MailUtil.java file leads to the cleartext transmissi...

PT-2026-95186

Name of the Vulnerable Software and Affected Versions O-RAN-SC SMO OAM version 2025-06-10 Description An issue exists within an unknown functionality of the VES Collector component. A remote attacker can perform a manipulation that leads to the allocation of resources. Recommendations At the...

PT-2026-95185

Name of the Vulnerable Software and Affected Versions O-RAN-SC SMO OAM version 2025-06-10 Description An issue exists within an unknown functionality of the VES Collector component. A remote attacker can perform a manipulation that results in the allocation of resources. Recommendations At the...

PT-2026-94246

Name of the Vulnerable Software and Affected Versions rcourtman Pulse versions 6.0.4 and 6.1.0-rc.4 Description Improper input validation occurs in the Quick Security Setup Handler component when processing the Username argument within the fmt.Sprintf function at the '/api/security/quick-setup'...

CVE-2026-91002

A weakness has been identified in stamparm maltrail up to 3.0.1. This vulnerability affects the function blacklist of the file core/httpd.py of the component Blacklist Endpoint. Executing a manipulation can lead to missing authentication. The attack can be launched remotely. The exploit has been...

EUVD-2026-70817

A weakness has been identified in SpecterOps BloodHound up to 9.5.1. The affected element is the function NewV2API of the file cmd/api/src/api/registration/v2.go of the component Graph Write Endpoint. Executing a manipulation can lead to improper authorization. It is possible to launch the attack...

CVE-2026-82487

Beetel 450TC3 router (firmware 01.00.00_01 ) is affected by a weak password recovery vulnerability that enables authenticated privilege escalation . The attack is executable remotely with low privileges and no user interaction. The affected component is described as an unknown part in the provide...

EUVD-2026-54185

A flaw has been found in Insta InstaKNXServiceApp 1.2.3.1469. Affected by this issue is the function CreateWebClientAndDownloadFileList of the component Firmware Update Handler. Executing a manipulation can lead to insufficient verification of data authenticity. It is possible to launch the attac...

CVE-2026-19061

A flaw has been found in Insta InstaKNXServiceApp 1.2.3.1469. Affected by this issue is the function CreateWebClientAndDownloadFileList of the component Firmware Update Handler. Executing a manipulation can lead to insufficient verification of data authenticity. It is possible to launch the attac...