GHSA-42H9-826W-CGV3 vulnerabilities

Vulnerabilities for packages: langfuse, lerna, kubeflow-centraldashboard, opensearch-dashboards, jitsucom-jitsu, nextcloud-server, prism...

EUVD-2026-47233

Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-47238

Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

SUSE CVE-2026-16361

Memory safety bugs present in Thunderbird ESR 140.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox ESR 115.38, Firefox ESR 140.13, and Thunderbi...

SUSE CVE-2026-42617

unknown...

SUSE CVE-2026-42618

unknown...

PT-2026-67366

JupyterLab 4.5+ allows notebook settings to be shared and applied through an overrides.json file using the Import button in the Settings Editor. Certain notebook display settings were not properly validated before being applied. As a result, a crafted settings file could contain hidden instructio...

CVE-2026-38766

A privilege escalation vulnerability exists in Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 . A local attacker can escalate privileges by exploiting the sub_186f4 function, which is associated with a kernel mode driver . The vulnerability has been reported as having high technical impact rega...

CVE-2026-38763

An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to cause a denial of service via the function sub13828...

CVE-2026-38765

An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kernel driver pgsecdl.sys...

PT-2026-63515

Name of the Vulnerable Software and Affected Versions Protegent 360 version 2.0.0.4 Description A local attacker can escalate privileges through the sub 186f4 function. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2026-63513

Name of the Vulnerable Software and Affected Versions Protegent 360 version 2.0.0.4 Description A local attacker can cause a denial of service through the sub 13828 function. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

CVE-2026-38765

An issue in Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the pgsecdl.sys kernel driver. The vulnerability involves the driver's ability to perform low-level system tasks or communicate with hardware. At this time, there is no information rega...

CVE-2026-38763

An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to cause a denial of service via the function sub13828...

CVE-2026-38765

An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kernel driver pgsecdl.sys...

Enhancing Attack Detection Capabilities in BACnet/IP Networks Using Machine-Learning Models

Building Automation Systems BAS manage critical building functions using protocols such as BACnet/IP, yet defenders have limited tooling and few labeled datasets for detecting BACnet-specific attacks. This work addresses these gaps through three contributions. First, CISA's Zeek BACnet parser is...

CVE-2026-38763

An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to cause a denial of service via the function sub13828...

CVE-2026-38766

An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the sub186f4 function...

The vulnerability of the Windows File Explorer on Windows operating systems, allowing a hacker to disclose protected information

The vulnerability of the Windows File Explorer in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the Windows Media component in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the Windows Media component in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...