CVE-2025-67406

https://www.sourcecodester.com Advocate office management system 1.0 is affected by: SQL Injection. The impact is: execute arbitrary code remote. The component is: control/activatecase.php,?id=1. The attack vector is: A SQL Injection vulnerability exists in the activatecase.php in parameter id...

CVE-2025-67405

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in updatepassword.php via the parameter newpassword...

CVE-2025-67408

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in /saveuser.php via the parameter status...

CVE-2025-65337

Sourcecodester Fantastic Blog CMS 1.0 is vulnerable to Cross Site Scripting XSS in pageEditMember.php via the address field...

CVE-2026-13321 affecting package bind for versions less than 9.20.26-1

CVE-2026-13321 affecting package bind for versions less than 9.20.26-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-10723 affecting package bind for versions less than 9.20.26-1

CVE-2026-10723 affecting package bind for versions less than 9.20.26-1. An upgraded version of the package is available that resolves this issue...

GHSA-6G55-P6WH-862Q vulnerabilities

Vulnerabilities for packages: langfuse, vitess...

CVE-2026-6102

MSI Center NTIOLibX64 Origin Validation Error Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MSI Center. An attacker must first obtain the ability to execute low-privileged code on the target system in order ...

CVE-2026-13268

G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target...

CVE-2026-6102

The CVE-2026-6102 entry concerns MSI Center NTIOLib_X64 with a local privilege-escalation flaw in the NTIOLib_X64.sys driver due to insufficient validation of the origin of commands. A local attacker who can run low-privileged code can escalate to SYSTEM and execute arbitrary code. The issue is i...

CVE-2026-6102 MSI Center NTIOLib_X64 Origin Validation Error Local Privilege Escalation Vulnerability

MSI Center NTIOLibX64 Origin Validation Error Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MSI Center. An attacker must first obtain the ability to execute low-privileged code on the target system in order ...

EUVD-2026-50490

G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target...

CVE-2026-13268

The CVE concerns G DATA Total Security, specifically the Backup Service. A flaw allows local attackers to escalate privileges by abusing the service via creating a symbolic link to delete a file, enabling arbitrary code execution in the context of SYSTEM. This aligns with the ZDI advisory referen...

CVE-2026-13268 G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability

G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target...

vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion

A flaw was found in Vim, an open-source command-line text editor. The PHP omni-completion script improperly handles specially crafted input. When a victim opens a malicious PHP file and invokes omni-completion, an unescaped class or trait name can be interpreted as Ex commands. This allows a remo...

CVE-2026-64458

A flaw was found in the Linux kernel's Data Access MONitor DAMON subsystem. A local user with write permissions to the system file system sysfs can exploit this vulnerability by configuring extreme zero or excessively high monitoring intervals. This improper handling of interval values can lead t...

CVE-2026-40272

Improper Input Validation in the decode function of the traceparser library could allow an attacker with a corrupted kernel trace event log .kev file, to execute arbitrary code or cause a crash in processes that use libtraceparser in QNX hosts or targets...

Important: Red Hat Security Advisory: RHCS 10.8 bug fix and enhancement update

Updated RHCS 10.8 packages that fix several bugs are available. Red Hat Certificate System RHCS is a complete implementation of an enterprise software system designed to manage enterprise Public Key Infrastructure PKI deployments. Many of the subcomponents that comprise RHCS, such as the Tomcat...

CVE-2026-59898

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, ab attacker can force WebSocket upgrade via the lax V07 or V08 handshaker by sending Sec-WebSocket-Version: 7 and omitting Connection: Upgrade / Upgrade: websocket headers,...

CVE-2026-13723 Develar's electron-builder allows arbitrary file overwrite

A vulnerability in the zipx.Unzip extraction routine of Develar's app-builder allows an attacker to overwrite arbitrary files on macOS APFS by exploiting a Unicode Normalization Collision combined with symlink following behavior. APFS treats certain Unicode equivalent filenames as identical e.g.,...