PT-2026-115651

Incorrect DBus policy for lomiri-download-manager allows arbitrary user to run arbitrary command as root over DBus...

PT-2026-115606

Improper access control in asset contact password in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with general Edit but without Edit asset permission to modify the asset contact password via a crafted direct request to the partial-save endpoint...

Apache MINA Vysper 0.7 Unbounded XML Buffer Pre-Auth DoS

Summary Apache Vysper is an XMPP eXtensible Messaging and Presence Protocol server, also known as Jabber, designed to run stand-alone or embedded in another application and work with any compliant XMPP client. Description Apache MINA Vysper is an XMPP server that suffers from a remote,...

Apache Doris 4.1.5 JDBC Catalog Arbitrary File Read

Summary Apache Doris is a high-performance, real-time analytical database based on the MPP architecture. Known for being efficient, simple, and unified, it returns query results over massive datasets within sub-second latency, and a single system supports both high-concurrency point queries and...

PT-2026-115884

Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/fips140 and operates a malicious GOMODPROXY the user chooses to connect to can serve an arbitrary module in its place. We now unpack the trusted ziphash for the bundled golang.org/fips140 module and...

PT-2026-115470

The MB Custom Post Types & Custom Taxonomies WordPress plugin before 2.12.2 does not perform a capability check or validate a nonce on its migration actions, allowing any authenticated user, such as a subscriber, to trigger a one-way migration that creates published records and permanently delete...

PT-2026-115574

The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post content' parameter in all versions up to, and including, 2.8.191 due to insufficient input sanitization and output escaping. This makes...

PT-2026-115664

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, passes unvalidated sort order and order field strings into Django ORM order by calls when an authenticated user supplies foreign-key traversal paths in recipe search, RecipeBook, ...

PT-2026-115572

NordVPN for Windows allows local attackers to stop unprotected Windows system services and change their startup type to Manual via named pipes. The NordVPN user-mode application allows a low-privileged attacker to act as a trusted process and connect to the named pipe ".pipe...

PT-2026-115579

The MAIO WordPress plugin before 7.3.22 does not properly restrict access to its analytics data, treating a credential value shipped verbatim in its own public source as a valid API key, which allows unauthenticated attackers to retrieve the stored crawl-analytics log, including each recorded...

PT-2026-116143

ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, the exportEvents function concatenates the attacker-controlled exportFile request parameter into a shell command without neutralizing shell metacharacters when an authenticated user with View Events...

Nginx UI Code Execution

The vulnerability of the nginxconfigadd function in the Nginx UI server’s user interface is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

GitLab Authentication Code Execution

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code...

Important: mariadb1011

Issue Overview: A flaw was found in MariaDB. An authenticated user with permission to use the CONNECT storage engine can exploit an incorrect boundary check when handling DOS table types to write beyond the allocated stack buffer. This flaw could lead to arbitrary code execution or cause the...

Important: mariadb118

Issue Overview: A flaw was found in MariaDB. An authenticated user with permission to use the CONNECT storage engine can exploit an incorrect boundary check when handling DOS table types to write beyond the allocated stack buffer. This flaw could lead to arbitrary code execution or cause the...

Important: mariadb114

Issue Overview: A flaw was found in MariaDB. An authenticated user with permission to use the CONNECT storage engine can exploit an incorrect boundary check when handling DOS table types to write beyond the allocated stack buffer. This flaw could lead to arbitrary code execution or cause the...

Nginx UI CSRF

The vulnerability of the GetCasdoorUri and CasdoorCallback functions in the Nginx UI user interface of the Nginx server is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a remote attacker to execute a CSRF attack...

LibreOffice PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of LibreOffice. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF...

LibreOffice PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of LibreOffice. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF...

LibreOffice EMF+ Brush Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of LibreOffice. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of EMF...