CVE-2026-75803

creationtimestamp| type| source ---|---|--- 2026-08-26 01:09:35+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3mtx5jnfojs24 2026-08-26 12:35:20+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtydtvyhrf2r 2026-09-14 15:15:04+00:00| seen|...

CVE-2026-65905

creationtimestamp| type| source ---|---|--- 2026-08-26 01:00:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/djd7h3cbj7p5x 2026-08-26 12:30:27+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtydl6w76z2k 2026-08-27 16:10:04+00:00| seen|...

CVE-2026-80201

creationtimestamp| type| source ---|---|--- 2026-08-26 00:26:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ddfj5rmkf3fh3...

CVE-2026-79911

creationtimestamp| type| source ---|---|--- 2026-08-26 00:01:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtwzppmknq27 2026-08-26 00:07:55+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtx23h7slr2p 2026-08-26 01:50:04+00:00| seen|...

CVE-2026-75334

The report module in the backend of smart-web2 v1.3.1 is vulnerable to arbitrary SQL execution . The vulnerability exists because the sqlResource.sql parameter, submitted via the ReportController.save() interface, is stored in the t_report_sql_resource table and subsequently embedded directly int...

CVE-2026-75334

The report module in the backend of smart-web2 v1.3.1 is vulnerable to arbitrary SQL execution. The sqlResource.sql parameter is stored in the treportsqlresource table through the ReportController.save interface and directly embedded into Hibernate native queries without any parameterization or...

EUVD-2026-66700

The report module in the backend of smart-web2 v1.3.1 is vulnerable to arbitrary SQL execution. The sqlResource.sql parameter is stored in the treportsqlresource table through the ReportController.save interface and directly embedded into Hibernate native queries without any parameterization or...

CVE-2026-75334

The report module in the backend of smart-web2 v1.3.1 is vulnerable to arbitrary SQL execution. The sqlResource.sql parameter is stored in the treportsqlresource table through the ReportController.save interface and directly embedded into Hibernate native queries without any parameterization or...

Tenable Security Center Report Charting Remote Code Execution

This Metasploit module demonstrates how Tenable Security Center versions prior to 6.9.0 allow an authenticated, non-administrative user to achieve code execution as the web service account tns through report generation. This module requires Metasploit: https://metasploit.com/download Current...

CVE-2026-75334

The report module in the backend of smart-web2 v1.3.1 is vulnerable to arbitrary SQL execution. The sqlResource.sql parameter is stored in the treportsqlresource table through the ReportController.save interface and directly embedded into Hibernate native queries without any parameterization or...

PT-2026-82264

Name of the Vulnerable Software and Affected Versions smart-web2 version 1.3.1 Description The report module in the backend allows arbitrary SQL execution. This occurs because the sqlResource.sql parameter, processed through the ReportController.save interface and stored in the t report sql...

PT-2026-82186

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A heap buffer overflow exists in the synaptics-rmi4 driver. In the rmi f54 work function, an error during report request or command verification causes the code to bypass the logic that...

PT-2026-82185

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the synaptics-rmi4 driver where the rmi f54 work function reads a diagnostics report into the f54-report data buffer. The transfer size is determined by rmi f54 get...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098751)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098751 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: core: ensure the allocated report buffer can contain the reserved report ID When the report ...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098707)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098707 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix out-of-bounds write in ocfs2writeendinline KASAN reports a use-after-free write of 408...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098734)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098734 advisory. In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in pnetfindbasendev. syzbot reported use-after-free of netdevice in...

CVE-2026-80182

creationtimestamp| type| source ---|---|--- 2026-08-25 23:37:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/hhx4elitpalld 2026-08-26 12:56:48+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtyf2cl3t22w...

CVE-2026-78379

creationtimestamp| type| source ---|---|--- 2026-08-25 20:08:16+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtwmovwkty2m 2026-08-26 01:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtx5kkus2g2p 2026-08-26 14:47:54+00:00| seen|...

kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq

A flaw was found in the Linux kernel's Wacom Human Interface Device HID driver. This vulnerability allows a remote attacker to trigger an out-of-bounds read by sending a specially crafted, short Bluetooth HID report. This can lead to the disclosure of sensitive information from the system's memor...

CVE-2026-77998

creationtimestamp| type| source ---|---|--- 2026-08-25 14:08:04+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtvyktwh6j2e 2026-08-25 21:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtwseygqut2e 2026-08-28 16:00:06+00:00| published-proof-of-concept|...