PT-2026-85670

IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote attacker to obtain sensitive information due to incomplete scrubbing of sensitive credential fields...

PT-2026-85673

IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery...

The vulnerability of the qp_send_message() function in the drivers/crypto/hisilicon/sec2/sec_crypto.c file of the Linux kernel cryptographic accelerator driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the qpsendmessage function in the drivers/crypto/hisilicon/sec2/seccrypto.c file of the Linux kernel cryptographic accelerator driver relates to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow a remote attacker to...

PT-2026-86246

SQL Injection vulnerability in oasys sysoa version 1.0 allows a remote attacker to execute arbitrary code via the outtype parameter in the /outaddresspaging path...

CVE-2026-71626

An issue in Invoice Ninja v5.13.24 allows a remote attacker to obtain sensitive information via the StoreWebhookRequest.php, UpdateWebhookRequest.php, and WebhookSingle.php components...

EUVD-2026-71711

File Upload vulnerability in Zhao-github ApiAdmin v.5.0.1 allows a remote attacker to execute arbitrary code via a crafted .php file...

CVE-2025-67066

A SQL Injection vulnerability exists in oasys sysoa version 1.0 . A remote attacker can exploit the outtype parameter within the /outaddresspaging path to execute arbitrary code. The vulnerability has a CRITICAL base severity score of 9.8, with high impact on confidentiality, integrity, and avail...

EUVD-2026-71740

No authentication exists in the MQTT service of Trueview 6.0.23.4. The MQTT broker accepts client connections on TCP port 1883 without requiring authentication, allowing a remote attacker with network access to establish an MQTT session and perform unauthorized publish or subscribe operations...

PT-2026-86252

No authentication exists in the MQTT service of Trueview 6.0.23.4. The MQTT broker accepts client connections on TCP port 1883 without requiring authentication, allowing a remote attacker with network access to establish an MQTT session and perform unauthorized publish or subscribe operations...

Linux Distros Unpatched Vulnerability : CVE-2026-85051

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type confusion in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML...

CVE-2026-71622

A SQL injection vulnerability exists in Zhao-github APiAdmin v.5.0.1 . This flaw allows a remote attacker to obtain sensitive information by exploiting the User.php component. No specific remediation or exploit details are provided in the documents.

ROS-20260904-73-0018

The vulnerability of the checkunsafeoptions function in the GitPython library for interacting with Git repositories is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability may allow a remote attacker to execute arbitrary code...

The vulnerabilities in the net/netfilter/nf_nat_amanda.c and net/netfilter/nf_nat_sip.c modules of the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the net/netfilter/nfnatamanda.c and net/netfilter/nfnatsip.c modules in the Linux operating system lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity,...

CVE-2026-18489: Exposure of Data Element to Wrong Session

IBM ContextForge MCP Gateway - Translate utility = 1.0.8 MCP Context Forge could allow a remote attacker to obtain sensitive information from other sessions due to exposure of data elements to the wrong session...

The vulnerability of the `scpsys_get_bus_protection_legacy()` function in the drivers/pmdomain/mediatek/mtk-pm-domains.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the scpsysgetbusprotectionlegacy function in the drivers/pmdomain/mediatek/mtk-pm-domains.c module of the Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity,...

The vulnerability of the match_policy_in() function in the net/netfilter/xt_policy.c module of the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the matchpolicyin function in the net/netfilter/xtpolicy.c module of the netfilter component of the Linux operating system is related to an incorrect order of authentication checks before syntactic analysis and canonization. Exploiting this vulnerability could allow a remote...

The vulnerability of the tipc_bufAppend() function in the net/tipc/msg.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tipcbufAppend function in the net/tipc/msg.c module of the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the sun4i_backend_atomic_check() function in the drivers/gpu/drm/sun4i/sun4i_backend.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the sun4ibackendatomiccheck function in the drivers/gpu/drm/sun4i/sun4ibackend.c file of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service...

The vulnerability of the inet_frag_queue_flush() function in the net/ipv4/inet_fragment.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the inetfragqueueflush function in the net/ipv4/inetfragment.c module of the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and...

The vulnerability of the ipip6_tunnel_xmit() function in the net/ipv6/sit.c module of the Linux kernel’s IPv6 implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ipip6tunnelxmit function in the net/ipv6/sit.c module of the Linux kernel’s IPv6 implementation is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality,...