EUVD-2026-54309

ICS-Park Smart Park Management System v2.0 contains an unrestricted file upload vulnerability in the file upload module. This allows a remote attacker to execute arbitrary code...

CVE-2026-15570: Server-Side Request Forgery (SSRF)

An improper restriction of URL schemes and destinations in the SmartCenter browserseturl command in the Telefunken TE24553B45V2DZ Smart TV running on the Vestel MB181 / Voltron181 / TiVo OS platform allows an attacker with access to the same local network to cause the embedded browser to issue...

PT-2026-69040

Name of the Vulnerable Software and Affected Versions Telefunken TE24553B45V2DZ Smart TV versions prior to V2.85.2.0 Description Improper restriction of URL schemes and destinations in the SmartCenter browserseturl command allows an attacker on the same local network to force the embedded browser...

CVE-2026-67688

ICS-Park Smart Park Management System v2.0 contains an unrestricted file upload vulnerability in the file upload module. This allows a remote attacker to execute arbitrary code...

WordPress Smart Popup by Supsystic plugin <= 1.12.0 - Unauthenticated Privilege Escalation to Administrator vulnerability

Unauthenticated Privilege Escalation to Administrator vulnerability discovered by daroo in WordPress Plugin Popup by Supsystic versions = 1.12.0...

CVE-2026-18909

A stack-based buffer overflow vulnerability exists in ELAN Microelectronics Corp. ELAN Smart-Pad on Windows ETD.sys and ETDSMBus.sys. During Intel SMBus recovery, ETDSMBus.sys does not enforce an upper-bound check on the hardware-derived report count, allowing an out-of-range value to be forwarde...

EUVD-2026-53707

A stack-based buffer overflow vulnerability exists in ELAN Microelectronics Corp. ELAN Smart-Pad on Windows ETD.sys and ETDSMBus.sys. During Intel SMBus recovery, ETDSMBus.sys does not enforce an upper-bound check on the hardware-derived report count, allowing an out-of-range value to be forwarde...

CVE-2026-18909

A stack-based buffer overflow vulnerability exists in ELAN Microelectronics Corp. ELAN Smart-Pad on Windows ETD.sys and ETDSMBus.sys. During Intel SMBus recovery, ETDSMBus.sys does not enforce an upper-bound check on the hardware-derived report count, allowing an out-of-range value to be forwarde...

CVE-2026-18909

A stack-based buffer overflow vulnerability exists in ELAN Microelectronics Corp. ELAN Smart-Pad on Windows ETD.sys and ETDSMBus.sys. During Intel SMBus recovery, ETDSMBus.sys does not enforce an upper-bound check on the hardware-derived report count, allowing an out-of-range value to be forwarde...

CVE-2026-18909

Summary: A stack-based buffer overflow in ELAN Smart-Pad on Windows affects ETD.sys and ETDSMBus.sys. During Intel SMBus recovery, ETDSMBus.sys fails to enforce an upper-bound on the hardware-derived report count, allowing an out-of-range value to be passed to ETD.sys, where it is used as a loop ...

Security Bulletin: IBM Engineering Lifecycle Management - Doors Next is impacted by vulnerability

Summary A vulnerability has been identified in Json-smart library, which is used in IBM Engineering Lifecycle Management - Doors Next. Vulnerability Details CVEID:CVE-2023-1370 DESCRIPTION:Json-smart is a performance focused, JSON processor lib. When reaching a ‘‘ or ‘‘ character in the JSON inpu...

CVE-2026-67688

ICS-Park Smart Park Management System v2.0 contains an unrestricted file upload vulnerability in the file upload module. This allows a remote attacker to execute arbitrary code...

CVE-2026-67688

ICS-Park Smart Park Management System v2.0 contains an unrestricted file upload vulnerability in the file upload module. This allows a remote attacker to execute arbitrary code...

CVE-2026-18909: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability exists in ELAN Microelectronics Corp. ELAN Smart-Pad on Windows ETD.sys and ETDSMBus.sys. During Intel SMBus recovery, ETDSMBus.sys does not enforce an upper-bound check on the hardware-derived report count, allowing an out-of-range value to be forwarde...

PT-2026-68375

Name of the Vulnerable Software and Affected Versions ELAN Smart-Pad versions prior to ETD24.21.52.3 Description A stack-based buffer overflow occurs in the ETD.sys and ETDSMBus.sys drivers. During Intel SMBus recovery, ETDSMBus.sys fails to enforce an upper-bound check on the hardware-derived...

CVE-2026-67688: Unrestricted Upload of File with Dangerous Type

ICS-Park Smart Park Management System v2.0 contains an unrestricted file upload vulnerability in the file upload module. This allows a remote attacker to execute arbitrary code...

CVE-2026-67688

The ICS-Park Smart Park Management System v2.0 is vulnerable to an unrestricted file upload in the file upload module. The root cause is that the DEFAULT_ALLOWED_EXTENSION whitelist permits .html and .htm extensions while the upload directory is mapped as a static resource path. This allows an au...

PT-2026-68778

Name of the Vulnerable Software and Affected Versions ICS-Park Smart Park Management System version 2.0 Description The file upload module contains an unrestricted file upload flaw. This allows a remote attacker to upload malicious files and execute arbitrary code on the system. Recommendations A...

rclone: PowerShell Smart-Quote Filename Injection Enables SFTP Server-Side Command Execution

Summary rclone interpolates remote SFTP paths into PowerShell hash commands. Its quoting helper escapes only ASCII apostrophe, although PowerShell accepts four Unicode smart quotes as single-quote delimiters. An attacker-controlled filename can therefore terminate the intended path literal and...

CVE-2026-71312 rclone: PowerShell Smart-Quote Filename Injection Enables SFTP Server-Side Command Execution

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to v1.75.0, rclone interpolates remote SFTP paths into PowerShell hash commands in backend/sftp/sftp.go, and quoteOrEscapeShellPath escapes only ASCII apostrophe even though...