CVE-2026-54918

NetBox Device Type Library is a community-sourced collection of device type definitions for import into NetBox. In affected revisions, the NETBOX_DT_LIBRARY_URL constant in tests/test_configuration.py is a free-form tracked value that an unauthenticated pull-request author can modify before the C...

CVE-2026-54918 NetBox Device Type Library: PR-controllable upstream clone URL (NETBOX_DT_LIBRARY_URL) enables SSRF and test-data substitution from CI

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. In the affected repository revisions, NETBOXDTLIBRARYURL in tests/testconfiguration.py is a free-form tracked constant that an unauthenticated pull-request author can change before the...

PT-2026-95097

Name of the Vulnerable Software and Affected Versions NetBox Device Type Library affected versions not specified Description An unauthenticated pull-request author can modify the NETBOX DT LIBRARY URL constant in tests/test configuration.py before the validation test harness executes. During pyte...

CVE-2026-81875 HAPI FHIR: SHCParser unbounded DEFLATE decompression causes denial of service

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.12, SHCParser in org.hl7.fhir.r5/src/main/java/org/hl7/fhir/r5/elementmodel/SHCParser.java can consume attacker-controlled Smart Health Card JWT content whose header...

PT-2026-93917

Name of the Vulnerable Software and Affected Versions HAPI FHIR versions prior to 6.9.12 Description A denial-of-service issue exists when processing Smart Health Card SHC JWT content. If the JWT header contains zip: "DEF" and the raw-DEFLATE payload is empty or truncated, the SHCParser.inflate a...

PT-2026-93902

Name of the Vulnerable Software and Affected Versions HAPI FHIR versions prior to 6.9.12 Description The SHCParser component in org.hl7.fhir.r5/src/main/java/org/hl7/fhir/r5/elementmodel/SHCParser.java fails to limit the size of decompressed Smart Health Card JWT payloads. When a JWT header...

PT-2026-94092

Name of the Vulnerable Software and Affected Versions TCH QRing smart ring model R20 B006 version RT09R20 1.00.00 250318 Description The device contains an unauthenticated Bluetooth Low Energy access issue. A nearby attacker can connect to the device without pairing, authentication, or user...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38408)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from improper access control in the delSmartQosCfg function. Attackers can exploit this vulnerability by sending a specially crafted POST...

CVE-2026-81876: Improper Input Validation

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.12, SHCParser in org.hl7.fhir.r5/src/main/java/org/hl7/fhir/r5/elementmodel/SHCParser.java can enter an infinite loop while processing attacker-controlled Smart Health Car...

Security Bulletin: Denial of Service Security Vulnerability in Json-smart Affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2024-57699)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the security vulnerability Vulnerability Details CVEID:CVE-2024-57699 DESCRIPTION: A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1. When loading a specially crafted JSON input, containing a large...

CVE-2025-66974

An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version mEzee 2.6.7 allows attackers to cause a Denial of Service DoS or connection to an attacker-controlled device via supplying a crafted packet during the provisioning phase...

SUSE SLES12 Security Update : opensc (SUSE-SU-2026:4108-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4108-1 advisory. This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in pivprocesshistory allows physically present...

SUSE SLED15 / SLES15 Security Update : opensc (SUSE-SU-2026:4123-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4123-1 advisory. This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in pivprocesshistory allows...

Cybersecurity in Power Grids: Standards and Research Challenges

This paper examines Smart Grid cybersecurity, emphasizing the critical distinctions between IT and OT environments. It analyzes grid architecture, substation threats, and key international standards, specifically IEC 62351, IEC 62443, and ISO 27001. Finally, it overviews latest research trends,...

CVE-2025-66974

An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version mEzee 2.6.7 allows attackers to cause a Denial of Service DoS or connection to an attacker-controlled device via supplying a crafted packet during the provisioning phase...

CVE-2025-66974

The Prolink 13A Smart Plug (Model Version: DS-3202M-UKv3 Wi-Fi) and the mEzee application (Version 2.6.7 ) are vulnerable to an issue that allows attackers to cause a Denial of Service (DoS) or force a connection to an attacker-controlled device. This vulnerability is triggered by supplying a cra...

EUVD-2025-210914

An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version mEzee 2.6.7 allows attackers to cause a Denial of Service DoS or connection to an attacker-controlled device via supplying a crafted packet during the provisioning phase...

CVE-2025-66974

An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version mEzee 2.6.7 allows attackers to cause a Denial of Service DoS or connection to an attacker-controlled device via supplying a crafted packet during the provisioning phase...

CVE-2025-66974: Improper Input Validation

An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version mEzee 2.6.7 allows attackers to cause a Denial of Service DoS or connection to an attacker-controlled device via supplying a crafted packet during the provisioning phase...

PT-2026-92138

An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version mEzee 2.6.7 allows attackers to cause a Denial of Service DoS or connection to an attacker-controlled device via supplying a crafted packet during the provisioning phase...