4580 matches found
CVE-2026-84147
Manacle Technologies ERP System is vulnerable to remote code execution due to improper authentication controls and inadequate file type validation at the API endpoint. An unauthenticated remote attacker can upload arbitrary files to a web-accessible directory on the targeted system, enabling arbi...
CVE-2026-84147 Remote Code Execution Vulnerability in Manacle Technologies ERP System
This vulnerability exists in the ERP system due to improper authentication controls and inadequate file type validation at the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by uploading arbitrary files to a web accessible directory on the targeted system...
Rewiring Democracy Series on The Renovator
Nathan E. Sanders and I are writing a series of essays on real-world examples of democratic technologies for The Renovator. I haven't been posting the full text on the blog because they're a bit long, but here are links. Part 1 is about the Japanese digital democracy party, Team Mirai. Part 2 is...
CVE-2026-18765: Improper Neutralization of Special Elements used in an SQL Command
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Teracity Software Technologies Inc. E-OSB allows SQL Injection. This issue affects E-OSB: before V02.26.07.08.01...
asterisk v23.5.0-rc1
The AsteriskR Open Source PBX root@kitploit: By Mark Spencer and the Asterisk.org developer community. Copyright C 2001-2025 Sangoma Technologies Corporation and other copyright holders. SECURITY It is imperative that you read and fully understand the contents of the security information document...
Multiple vulnerabilities in NetKids iMark
Overview NetKids iMark provided by Integrated Systems Technologies, Inc. contains multiple vulnerabilities listed below: Uncontrolled search path element CWE-427 - CVE-2026-66344 Unquoted search path or element CWE-428 - CVE-2026-66839 Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc. reported...
EUVD-2026-53044
NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Unquoted Search Path or Element vulnerability CWE-428. An authenticated attacker may exploit this vulnerability to execute arbitrary code with SYSTEM privileges...
CVE-2026-66839
NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Unquoted Search Path or Element vulnerability CWE-428. An authenticated attacker may exploit this vulnerability to execute arbitrary code with SYSTEM privileges...
CVE-2026-66344
NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Uncontrolled Search Path Element vulnerability CWE-427. An authenticated attacker may exploit this vulnerability to execute arbitrary code with SYSTEM privileges...
Hitron Technologies Router Login Panel - Detect
Hitron Technologies router login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Hitron Technologies router login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Hitron Technologi...
NVIDIA Forms 37-Member Open Secure AI Alliance and Open-Sources NOOA Framework
NVIDIA and 36 other organizations have formed the Open Secure AI Alliance to develop and share open technologies, techniques, and tools for securing software and artificial intelligence AI agents. The 37-member group spans cloud, security, enterprise software, and AI companies, including Microsof...
CVE-2023-28310
creationtimestamp| type| source ---|---|--- 2026-07-26 07:01:37+00:00| seen| https://t.me/PositiveTechnologies/1603 2026-07-27 00:01:28+00:00| seen| https://t.me/PositiveTechnologies/1603 2026-07-28 19:00:05+00:00| seen| https://t.me/PositiveTechnologies/1603 2026-07-29 00:00:28+00:00| seen|...
CVE-2023-22815
creationtimestamp| type| source ---|---|--- 2026-07-26 07:01:24+00:00| seen| https://t.me/PositiveTechnologies/1798 2026-07-27 00:01:28+00:00| seen| https://t.me/PositiveTechnologies/1798 2026-07-28 19:00:05+00:00| seen| https://t.me/PositiveTechnologies/1798 2026-07-29 00:00:28+00:00| seen|...
CVE-2023-36011
creationtimestamp| type| source ---|---|--- 2026-07-26 07:01:23+00:00| seen| https://t.me/PositiveTechnologies/2225 2026-07-27 00:01:26+00:00| seen| https://t.me/PositiveTechnologies/2225 2026-07-28 18:00:06+00:00| seen| https://t.me/PositiveTechnologies/2225 2026-07-29 00:00:29+00:00| seen|...
CVE-2023-35632
creationtimestamp| type| source ---|---|--- 2026-07-26 07:01:23+00:00| seen| https://t.me/PositiveTechnologies/2225 2026-07-27 00:01:26+00:00| seen| https://t.me/PositiveTechnologies/2225 2026-07-28 18:00:06+00:00| seen| https://t.me/PositiveTechnologies/2225 2026-07-29 00:00:30+00:00| seen|...
End-to-End Encryption and “Going Dark”
New paper: "Encryption and Globalization 15 Years Later: End-to-End Encryption and the Third Round of the 'Going Dark' Debate": Abstract : This Article updates and expands on 2012 research on encryption and globalization, analyzing what the authors call "Round 3" of the Going Dark Debate: the...
CVE-2026-16287: Improper Neutralization of Special Elements used in an OS Command
Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-update allows OS Command Injection. This issue affects pardus-update: from 0.6.6 before 0.7.0...
CVE-2026-7488 Sensitive Data Exposure in IKAS Technologies' E-Commerce
Insertion of sensitive information into sent data vulnerability in IKAS Technology Inc. E-Commerce allows Retrieve Embedded Sensitive Data. This issue affects E-Commerce: through 03062026...
CVE-2026-7488 Sensitive Data Exposure in IKAS Technologies' E-Commerce
Insertion of sensitive information into sent data vulnerability in IKAS Technology Inc. E-Commerce allows Retrieve Embedded Sensitive Data. This issue affects E-Commerce: through 03062026...