CVE-2026-21791: Insertion of Sensitive Information into Log File

HCL Sametime for Android is impacted by a sensitive information disclosure. Hostnames information is written in application logs and certain URL...

CVE-2026-2273: Improper Control of Generation of Code

CWE-94: Improper Control of Generation of Code 'Code Injection' vulnerability exist that could cause execution of untrusted commands on the engineering workstation which could result in a limited compromise of the workstation and a potential loss of Confidentiality, Integrity and Availability of...

CVE-2026-26131: Incorrect Default Permissions

Incorrect default permissions in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-24289: Use After Free

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2025-41711: Use of a Broken or Risky Cryptographic Algorithm

An unauthenticated remote attacker can use firmware images to extract password hashes and brute force plaintext passwords of accounts with limited access...

CVE-2026-0116: Out-of-bounds Write

In mfchandlereleasedbuf of mfccoreisr.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0120: Out-of-bounds Write

In modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-13902: Improper Neutralization of Input During Web Page Generation

CWE-79 Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists that could cause condition where authenticated attackers can have a victim’s browser run arbitrary JavaScript when the victim hovers over a maliciously crafted element on a web server...

CVE-2026-24287: External Control of File Name or Path

External control of file name or path in Windows Kernel allows an authorized attacker to elevate privileges locally...

Vertex AI Experiments Bucket Squatting Defensive Scanner

The Vertex AI Bucket Squatting Defensive Scanner is a security assessment tool designed to detect potential Google Cloud Storage bucket hijacking risks related to predictable naming patterns in Vertex AI experiment workflows. Instead of exploiting the vulnerability, this defensive version perform...

CVE-2025-41709: Improper Neutralization of Special Elements used in an OS Command

An unauthenticated remote attacker can perform a command injection via Modbus-TCP or Modbus-RTU to gain read and write access on the affected device...

📄 WatchGuard IKEv2 Detection Scanner

This Metasploit module checks for potential vulnerability to CVE-2022-23176 in WatchGuard Firmware IKEv2 service by analyzing malformed IKESAINIT responses. ============================================================================================================================================...

CVE-2025-11739: Deserialization of Untrusted Data

CWE‑502: Deserialization of Untrusted Data vulnerability exists that could cause arbitrary code execution with administrative privileges when a locally authenticated attacker sends a crafted data stream, triggering unsafe deserialization...

CVE-2025-41710: Use of Hard-coded Credentials

An unauthenticated remote attacker may use hardcodes credentials to get access to the previously activated FTP Server with limited read and write privileges...

CVE-2026-30919: Improper Neutralization of Input During Web Page Generation

facileManager is a modular suite of web apps built with the sysadmin in mind. Prior to 6.0.4 , stored XSS also known as persistent or second-order XSS occurs when an application receives data from an untrusted source and includes that data in its subsequent HTTP responses in an unsafe manner. Thi...

CVE-2025-36173: Improper Neutralization of Input During Web Page Generation

Affected ProductsVersionsInfoSphere Data Architect9.2.1...

CVE-2026-0113: Out-of-bounds Write

In nsGetUserData of nsSmscbUtilities.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48611: Buffer Copy without Checking Size of Input

In DeviceId of DeviceId.java, there is a possible desync in persistence due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0122: Out-of-bounds Write

In multiple places, there is a possible out of bounds write due to memory corruption. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-3862: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS allows an attacker to submit specially crafted data to the application which is returned unaltered in the resulting web page...