CVE-2026-22909: Improper Access Control

Certain system functions may be accessed without proper authorization, allowing attackers to start, stop, or delete installed applications, potentially disrupting system operations...

CVE-2026-22916: Incorrect Privilege Assignment

An attacker with low privileges may be able to trigger critical system functions such as reboot or factory reset without proper restrictions, potentially leading to service disruption or loss of configuration...

CVE-2026-22918: Improper Restriction of Rendered UI Layers or Frames

An attacker may exploit missing protection against clickjacking by tricking users into performing unintended actions through maliciously crafted web pages, leading to the extraction of sensitive data...

CVE-2026-22908: Incorrect Privilege Assignment

Uploading unvalidated container images may allow remote attackers to gain full access to the system, potentially compromising its integrity and confidentiality...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003143)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003143 advisory. Microarchitectural Load Port Data Sampling MLPDS: Load ports on some microprocessors utilizing speculative execution may allow an authenticated user to potentially...

CVE-2025-67025: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Anycomment anycomment.io 0.4.4 allows a remote attacker to execute arbitrary code via the Anycomment comment section...

Livewire Request Detected

This is an informational plugin to inform the user that the scanner has detected the usage of the Livewire framework in the target web application. Livewire is a full-stack framework for Laravel that makes building dynamic interfaces simple, without leaving the comfort of Laravel. No source data...

ScienceLogic Skylar One Detection

Binary data sciencelogicskylaronedetect.nbin...

CVE-2026-22644: Use of GET Request Method With Sensitive Query Strings

Certain requests pass the authentication token in the URL as string query parameter, making it vulnerable to theft through server logs, proxy logs and Referer headers, which could allow an attacker to hijack the user's session and gain unauthorized access...

CVE-2026-22915: Exposure of Sensitive System Information to an Unauthorized Control Sphere

An attacker with low privileges may be able to read files from specific directories on the device, potentially exposing sensitive information...

Exploit for Improper Handling of Length Parameter Inconsistency in Mongodb

🐍 mongobleed-scanner - Scan for MongoDB Vulnerabilities Easily...

CVE-2025-68959: Exposure of Sensitive Information to an Unauthorized Actor

Permission verification bypass vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-12052: Out-of-bounds Write

The drivers in the tool packages use RTLQUERYREGISTRYDIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow...

CVE-2025-12050: Out-of-bounds Write

The drivers in the tool packages use RTLQUERYREGISTRYDIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow...

CVE-2025-68967: Undefined Security Weakness

Vulnerability of improper permission control in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-68966: Exposure of Sensitive Information to an Unauthorized Actor

Permission control vulnerability in the Notepad module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-12051: Out-of-bounds Write

The drivers in the tool packages use RTLQUERYREGISTRYDIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow...

CVE-2025-70968: Use After Free

FreeImage 3.18.0 contains a Use After Free in PluginTARGA.cpp;loadRLE...

CVE-2025-67835: Uncontrolled Resource Consumption

Paessler PRTG Network Monitor before 25.4.114 allows Denial-of-Service DoS by an authenticated attacker via the Notification Contacts functionality...

CVE-2025-68962: Concurrent Execution using Shared Resource with Improper Synchronization

Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability...