CVE-2026-49885: Integer Overflow or Wraparound

In rwt4tupdatefile of rwt4t.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49880: Undefined Security Weakness

In multiple functions of nfanfceeact.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-93317: Improper Validation of Integrity Check Value

An unauthenticated attacker controlling a registry or OCI-layout blob source could provide blob contents that did not match the claimed digest. The resulting snapshot could be cached under that digest and reused by a later victim build, compromising build-input integrity...

CVE-2026-28625: Undefined Security Weakness

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-105631: Authorization Bypass Through User-Controlled Key

Plane is an open-source project management tool. Prior to 1.4.0, WorkspaceFileAssetEndpoint.get and WorkspaceAssetDownloadEndpoint.get resolve FileAsset records within a workspace without checking membership in the asset's project, allowing a workspace member to download assets from private...

CVE-2026-55286: Improper Restriction of Operations within the Bounds of a Memory Buffer

In stpropnciprocess of stpropnci.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58865: Improper Restriction of Operations within the Bounds of a Memory Buffer

In multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58854: Access of Resource Using Incompatible Type

In multiple locations, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49878: Out-of-bounds Write

In wpashandlerobustavscsrecvaction of robustav.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-104706: Path Traversal: 'dir\..\..\filename'

DigitalCanion has discovered a path traversal vulnerability that allows to view or download sensitive system files over the portal https:// :8443 via menus Administration - View Logs...

CVE-2026-63270: Exposure of Sensitive Information to an Unauthorized Actor

URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. The check added for CVE-2024-12426 did not cover every place a document can supply a URL...

CVE-2026-58815: Improper Restriction of Operations within the Bounds of a Memory Buffer

In multiple locations, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55269: Improper Input Validation

In FilterCapturedPacket of snooplogger.cc, there is a possible memory safety issue due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28648: Undefined Security Weakness

In Settings, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-45524: Missing Authorization

In isSystem of WifiPermissionsUtil.java, there is a possible sandbox escape due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-104811: Unrestricted Upload of File with Dangerous Type

DigitalCanion SA has discovered a vulnerability that allows remote attackers to execute arbitrary code on affected installations of the product. Authentication may be required to exploit this vulnerability. The specific flaw exists within the Configuration → Services → Music on Hold functionality...

CVE-2026-58859: Uncaught Exception

In multiple places, there is a possible denial of service due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55270: Unintended Proxy or Intermediary

In dialInternal in multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-42031-SQL-Injection-Scanner

🛡️ Scanner CVE-2026-42031 Scanner d'injection SQL pour CKAN DataStore Cet outil est utilisé pour détecter et valider la vulnérabilité CVE-2026-42031 injection SQL sur la plateforme CKAN DataStore. 📋 Fonctionnalités ✅ 8 requêtes de validation automatiques base de données, tables, colonnes, etc. ✅...

CVE-2022-1388

shodan search 'http.html:"BIG-IP Configuration Utility"' --fields=ipstr,port --separator ":" --limit 10 | grep '' shodan search 'http.title:"BIG-IP®-+Redirect"+"Server"' --fields=ipstr,port --separator ":" --limit 10 | grep '' CVE-2022-1388 ماسح CVE-2022-1388 الاستخدام $python3...