Linux Distros Unpatched Vulnerability : CVE-2026-80765

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: hyperv: validate initial device info bounds The Hyper-V synthetic HID host supplies SYNTHHIDINITIALDEVICEINFO messages that contain a HID descriptor follow...

PT-2026-85606

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.5-1.1 Description The Hyper-V synthetic HID host provides SYNTH HID INITIAL DEVICE INFO messages containing a HID descriptor and report descriptor bytes. The mousevsc on receive device info function fails to...

CVE-2026-75439

An issue in Free5GC v.4.2.2 allows a remote attacker to cause a denial of service via the UPF component...

CVE-2026-75439

An issue in Free5GC v.4.2.2 allows a remote attacker to cause a denial of service via the UPF component . A NULL Pointer Dereference is identified as a related mechanism for this vulnerability. Specific exploit information or mitigation details are not provided in the documents.

PT-2026-86249

Name of the Vulnerable Software and Affected Versions Free5GC version 4.2.2 Description A remote attacker can cause a denial of service in the UPF User Plane Function component, which is responsible for packet routing and forwarding in the 5G core network. Recommendations At the moment, there is ...

PT-2026-86243

SQL injection vulnerability in Zhao-github APiAdmin v.5.0.1 allows a remote attacker to obtain sensitive information via the User.php component...

EUVD-2026-71743

An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges via the ResetPasswordController.php component...

CVE-2026-71620

File Upload vulnerability in Zhao-github ApiAdmin v.5.0.1 allows a remote attacker to execute arbitrary code via a crafted .php file...

vpod v0.8.1

Vpod Live demo • Getting Started • Documentation • Issues • Contributing What is a vpod ? A vpod is a lightweight, portable sandbox that gives an untrusted process an instant Linux environment. It uses a RISC‑V architecture and runs entirely inside WebAssembly. Fast startup : Boot in under a...

DEBIAN-CVE-2026-52295

FFmpeg before 9.0 has an out-of-bounds read because the copied extradata lacked required padding before GetBitContext-based access in libavformat/iamfwriter.c...

CVE-2026-52295

FFmpeg before 9.0 has an out-of-bounds read because the copied extradata lacked required padding before GetBitContext-based access in libavformat/iamfwriter.c...

CVE-2026-52022

An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the IMS P-CSCF registration handling components...

CVE-2026-18630

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows SQL Injection. This issue affects Talassoft Industrial Management Software: from V.4 before V.16...

EUVD-2026-69284

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows SQL Injection. This issue affects Talassoft Industrial Management Software: from V.4 before V.16...

CVE-2026-18780 CSRF in TMT Machine's Talassoft Industrial Management Software

Cross-Site request forgery CSRF vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows Cross Site Request Forgery. This issue affects Talassoft Industrial Management Software: from V.4 before V.16...

CVE-2026-18780

TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software contains a Cross-Site Request Forgery (CSRF) vulnerability affecting versions V.4 through before V.16 . The vulnerability allows an attacker to forge requests on behalf of an authenticated user, resulting in a High i...

CVE-2026-18771

TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software is affected by a missing authentication for critical function vulnerability, enabling Authentication Bypass in versions V4 through before V.16 . The CNA (USOM, Turkey) assigned a CVSS 3.1 score of 7.5 (HIGH) with a v...

CVE-2026-80688

A flaw was found in the Linux kernel, specifically within the RISC-V architecture's veccheckunalignedaccessspeedallcpus function. This function, intended for initialization, could continue running as a kernel thread after its allocated memory is released. If this occurs, the system attempts to...

CVE-2026-18771: Missing Authentication for Critical Function

Missing authentication for critical function vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows Authentication Bypass. This issue affects Talassoft Industrial Management Software: from V4 before V.16...

PT-2026-84287

Missing authentication for critical function vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows Authentication Bypass. This issue affects Talassoft Industrial Management Software: from V4 before V.16...