CVE-2026-100890

A null pointer dereference vulnerability exists in the Trusted Domain Project OpenDMARC (up to version 1.4.2 ). The flaw is located in the opendmarc_spf_ipv6_explode function within the SPF Parser component (specifically libopendmarc/opendmarc_spf.c). Manipulation of the cp argument triggers the ...

EUVD-2026-88054

A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarcspfipv6explode in the library libopendmarc/opendmarcspf.c of the component SPF Parser. This manipulation of the argument cp causes null pointer dereference. It is possibl...

PT-2026-102384

A vulnerability was found in FastStone Image Viewer up to 8.3. This affects an unknown function of the file FSViewer.exe of the component TGA Image Handler. The manipulation results in out-of-bounds read. The attack can be launched remotely. The vendor was contacted early about this disclosure bu...

PT-2026-102333

Name of the Vulnerable Software and Affected Versions Eleveo Quality Management version 9.7.0 Description A remote information disclosure issue exists within the functionality of the file /qm/cz.zoom.scorecard.webui.Scorecard/cz.zoom.scorecard.webui.Scorecard/QMBODownload. An attacker can remotel...

PT-2026-99925

Name of the Vulnerable Software and Affected Versions SUSE Rancher versions prior to 2.15.2 Description Incorrect credential cleaning during the logout process allows remote attackers to retain access credentials after an account has been logged out. Recommendations Update to version 2.15.2...

PT-2026-99881

A security vulnerability has been detected in dbgate up to 7.3.1. Affected by this vulnerability is the function files of the file packages/api/src/controllers/runners.js of the component Files Endpoint. The manipulation of the argument runid leads to path traversal. The attack is possible to be...

ROS-20260928-73-0115

The vulnerability of the walkstackframe function in the arch/riscv/kernel/stacktrace.c file, a subsystem for module management on the RISCV architecture of the Linux operating system’s kernel, relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker,...

ROS-20260928-73-0073

The vulnerability of the nfs4freeolstateid function in the fs/nfsd/nfs4state.c module, which is part of the network file system support in Linux kernels, relates to operations involving resources after their expiration. Exploiting this vulnerability could allow a remote attacker to cause service...

CVE-2026-100892: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability was found in aligungr UERANSIM up to 3.3.0. This affects the function ULInformationTransfer of the file src/gnb/rrc/handler.cpp of the component nr-gnb. Performing a manipulation of the argument dedicatedNASMessage results in memory corruption. The attack can be initiated remotely...

PT-2026-99757

Name of the Vulnerable Software and Affected Versions athlon1600 youtube-downloader versions prior to 4.0.2 Description Remote attackers can perform server-side request forgery SSRF by manipulating the url argument within the stream function located in the public/stream.php file. Server-side...

PT-2026-102400

Name of the Vulnerable Software and Affected Versions Ziroom ZHOME A0101 version 1.0.1.0 Description Remote command injection is possible due to improper processing of the /api/ZRQos/set online client endpoint. An attacker can exploit this by manipulating the mac argument to execute arbitrary...

CVE-2026-101145: Improper Neutralization of Special Elements used in an LDAP Query

A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This vulnerability affects unknown code of the file /callrec/userAddAction.do of the component User Management. Such manipulation of the argument Username leads to ldap injection. The attack can be executed remotely. The...

CVE-2026-101071: Unrestricted Upload of File with Dangerous Type

A vulnerability was determined in Acrel Electric Unet Web Service up to 20260814. This vulnerability affects unknown code of the file /exchange/attachment/upload of the component Upload Endpoint. This manipulation of the argument File causes unrestricted upload. The attack can be initiated...

CVE-2026-101066: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was determined in dbgate up to 7.3.1. The impacted element is the function createLink of the file packages/api/src/controllers/archive.js of the component Archive Link Creation. This manipulation of the argument linkedFolder causes path traversal. The attack may be initiated...

CVE-2026-101072: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was identified in Netcore NR289-GE 1.4.5102. This issue affects the function system of the file /apip.cgi of the component CGI Handler. Such manipulation of the argument ip leads to os command injection. The attack can be launched remotely. The exploit is publicly available and...

CVE-2026-100900: Server-Side Request Forgery (SSRF)

A vulnerability has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1. Affected is the function updateJiraProjects of the file /jira-import of the component Jira Import. The manipulation of the argument host/username/token leads to server-side request forgery. It i...

CVE-2026-101001: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval of the file /www/cgi-bin/networktools of the component Web Management Interface. Such manipulation of the argument QUERYSTRING leads to os command injection. It is possible to launch the attack...

CVE-2026-100906: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was detected in Eyeplus 57.0.0.0308. The affected element is the function GetUsers of the file /onvif/Device of the component ONVIF. The manipulation results in information disclosure. The attack can be executed remotely. The exploit is now public and may be used...

CVE-2026-100894: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This issue affects some unknown processing of the file updateguest.php. The manipulation of the argument gname leads to sql injection. The attack may be initiated remotely. Th...

CVE-2026-100891: Encoding Error

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library libopendmarc/opendmarcpolicy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is...