44601 matches found
EUVD-2026-49867
schreibfaul1 ESP32-audioI2S 3.4.5 has a heap-based buffer overflow vulnerability in the connecttospeech function. The application accepts attacker-controlled long speech text input, performs URL encoding, and directly appends the encoded result into a fixed psptr heap buffer when constructing HTT...
PT-2026-65510
schreibfaul1 ESP32-audioI2S 3.4.5 has a heap-based buffer overflow vulnerability in the connecttospeech function. The application accepts attacker-controlled long speech text input, performs URL encoding, and directly appends the encoded result into a fixed ps ptr heap buffer when constructing HT...
CVE-2026-54609: Uncontrolled Resource Consumption
QTI Neon is a minimal, game-agnostic, relay-based UDP multiplayer protocol library. In version 1.0.0, the relay's handleReconnectRequest forwards RECONNECTREQUEST packets to the host without bounding them, so an unauthenticated client can drive relay-to-host amplification and cause a denial of...
From Profiling to Parameterization: Physics-Guided Acoustic Eavesdropping Via Smartphone Accelerometers
We present LEAKFORGE, a device-agnostic framework that converts cross-device accelerometer eavesdropping into a physics-guided data-generation problem. Crucially, device-specific leakage is not arbitrary; its dominant variation lies within a constrained family of audio-to-accelerometer transfer...
CVE-2026-16587: Missing Authorization
The Advanced Form Integration — Connect Forms to 200+ Apps plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...
PT-2026-65445
The StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'message popup' parameter in all versions up to, and including, 2.1.0 due to insufficient input sanitization and...
CVE-2026-51269
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2026-51269
This CVE-2026-51269 entry is rejected/not used and does not represent an active vulnerability.
CVE-2026-62436: Concurrent Execution using Shared Resource with Improper Synchronization
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. With the introduction of Grant Table v2 came the requirement to be able to switch between versions. Switching from v1 to v2 reduces the number of valid grant references, ...
PT-2026-65477
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. With the introduction of Grant Table v2 came the requirement to be able to switch between versions. Switching from v1 to v2 reduces the number of valid grant references, ...
CVE-2026-15280: Improper Limitation of a Pathname to a Restricted Directory
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 ND Collective Controller is affected by a path-segment injection vulnerability in the collective routing mechanism...
PT-2026-68534
Name of the Vulnerable Software and Affected Versions AI Copilot – Content Generator versions prior to 1.5.7 Description An issue exists that allows unauthenticated attackers to elevate their privileges to those of an administrator. Recommendations Update to a version newer than 1.5.6...
Suricata 7.0.x < 7.0.17 Vulnerability (CVE-2026-57228)
The version of OISF Suricata installed on the remote host is 7.0.13 or later but prior to 7.0.17. It is, therefore, affected by a vulnerability: - Suricata could be crashed or made to consume excessive resources when processing crafted network traffic, leading to denial of service. CVE-2026-57228...
Linux Distros Unpatched Vulnerability : CVE-2026-55737
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Signed to Unsigned Conversion Error and Out-of-bounds Write vulnerability in Erlang OTP erts allows an attacker who can supply a crafted Erlang external term...
FreeBSD : Erlang/OTP -- binary_to_term crash on crafted BIT_BINARY_EXT input (445dc6b9-89e1-11f1-b35c-4c526214c986)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 445dc6b9-89e1-11f1-b35c-4c526214c986 advisory. https://github.com/erlang/otp/security/advisories/GHSA-54pw-5645-jh86 reports: A specially crafted...
WordPress Tutor LMS – eLearning and online course solution plugin <= 4.0.1 - Authenticated (Administrator+) SQL Injection vulnerability
Authenticated Administrator+ SQL Injection vulnerability discovered by Wordfence PRISM in WordPress Plugin Tutor LMS versions = 4.0.1...
CVE-2026-65441
Unauthenticated Cross Site Scripting XSS in GiveWP = 4.16.3 versions...