Cisco Webex App URL Redirection

The vulnerability of the Cisco Webex App for collaborative work relates to the redirection of the URL to an unreliable website as a result of incorrect processing of HTTP request parameters. Exploiting this vulnerability allows a malicious actor to redirect users to any desired URL address...

Windows RDP Information Disclosure

The vulnerability of the Remote Desktop Protocol RDP implementation in Windows operating systems is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

Ivanti Sentry Arbitrary Command Execution Root Privileges

The vulnerability of the built-in mobile security firewall, Ivanti Sentry, is related to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands with root privileges...

Go Windows DoS

The vulnerability of the net.Dial and net.LookupPort functions in the Go programming language for Windows operating systems is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause service interruptions...

XCP-ng Supervisor RBAC Access Bypass

The vulnerability of the setotherconfig function in the RBAC access control subsystem of the XCP-ng supervisor and the XenServer server virtualization platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

TCP/IP driver Windows Bypass Security Restrictions

The vulnerability of the TCP/IP driver for Windows operating systems relates to bypassing authentication using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions remotely...

Mattermost Authentication Bypass File Upload

The vulnerability of the Mattermost instant messaging application is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain access to and upload arbitrary files...

Containous Traefik Unauthorized Access

The vulnerability of the intermediate software ForwardAuth in the reverse proxy server Containous Traefik is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

Neo4jVectorFilterExpressionConverter SQL Injection

The vulnerability of the Neo4jVectorFilterExpressionConverter component in the Spring AI development framework relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...

Drupal Kernel Code Execution

The vulnerability of the Drupal CMS system’s kernel is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Tenda AC15 Code Execution

The vulnerability of the TextEditingConversion function in the Tenda AC15 router’s microprogramming software is related to the operation of writing data outside the buffer in memory when processing the wpapskcrypto24g parameter. Exploiting this vulnerability allows a remote attacker to execute...

Graphics component Windows Privilege Escalation

The vulnerability of the Graphics component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Linux kernel MPTCP DoS

The vulnerability of the mptcpdofastclose function in the net/mptcp/protocol.c module of the Linux kernel is related to the lack of resource initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...

Ivanti Endpoint Manager Mobile Improper Code Generation Code Execution

The vulnerability of the Ivanti Endpoint Manager Mobile EPMM application for managing the lifecycle of mobile devices and applications is related to improper code generation. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

Yougile (Alexey Trofimov) (No. 1 from February 2, 2026 at

...

Airoha Technology Custom Protocol Bluetooth TWS Earphones Bypass

The vulnerability of Airoha Technology’s Custom Protocol Bluetooth-chip TWS headphones is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow attackers to circumvent existing security restrictions...

Google Chrome Blink Data Access

The vulnerability of Google Chrome’s Blink rendering module is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow an attacker to gain access and delete data by using a specially created HTML page...

Tenda AC23 Router DoS

The vulnerability of the formSetPPTPUserList function in the Tenda AC23 router’s microprogramming software is related to the operation of writing data outside the buffer in memory when processing the list parameter. Exploiting this vulnerability could allow a malicious actor to cause service...

OpenPDF PDF Library Arbitrary File Read

The vulnerability of the OpenPDF library for creating and editing PDF documents is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to read arbitrary files...

Ext4 Heap Buffer Overflow DoS

The vulnerability of the ext4featuresetok function in the fs/ext4/super.c module of the Linux file system support module is related to incorrect validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

Totolink N600R Buffer Overflow

The vulnerability of the Totolink N600R router’s microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code through the UPLOADFILENAME component...

Tenda AC6 SetClientState() Code Execution

The vulnerability of the SetClientState function in Tenda AC6 microprogramming router software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by sending a specially...

Inbox COM objects Code Execution

The vulnerability of Inbox COM objects in Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

search_project() function in the Information Disclosure

The vulnerability of the searchproject function in the agent, which facilitates the work of developers like Junie, is related to the lack of user alerts about unsafe actions. Exploiting this vulnerability could allow a perpetrator to disclose protected information...

Defender Firewall Service Privilege Escalation

The vulnerability of the Defender Firewall Service for Windows operating systems is related to data type conversion errors. Exploiting this vulnerability can allow attackers to increase their privileges...

TCPDF XSS

The vulnerability of the PHP class for generating PDF documents via TCPDF is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

TOTOlink EX1800T Wi-Fi extension software setRebootScheCfg() function

The vulnerability of the setRptWizardCfg function /cgi-bin/cstecgi.cgi of the TOTOlink EX1800T Wi-Fi extension software is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to influence the confidentiality, integrity, and...

SolarWinds Observability Self-Hosted XSS

The vulnerability of the SolarWinds Observability Self-Hosted SWOSH software for network monitoring and IT infrastructure management is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting...

Linux kernel Wi-Fi Heap Buffer Overflow DoS

The vulnerability of the p54rxeepromreadback function in the Linux kernel’s Wi-Fi component involves copying buffers without checking the input data. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the cscfgloadconfigsets function in the Linux operating system kernel arises from a race condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linksys WRT120N tmUnblock.cgi Unauthorized Access

The vulnerability of the tmUnblock.cgi microprogramming software for wireless routers like Linksys WRT120N is related to buffer overflows in the stack when processing the TMBlockURL parameter. Exploiting this vulnerability allows an attacker to gain unauthorized access to the web-based control...

Tenda FH1201 Router fromPptpUserAdd Heap Buffer Overflow DoS

The vulnerability of the fromPptpUserAdd /goform/PPTPDClient function in the Tenda FH1201 router microprogramming system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code ...

1C-Bitrix Main Fileman Module Unauthorized Access

Vulnerability of the main and fileman modules of the 1C-Bitrix website management system: Website management involves insecure handling of privileges. Exploiting this vulnerability can allow an attacker to gain unauthorized access to configuration and executable files...

Cisco Unified Contact Center Express XSS

The vulnerability in the web interface for controlling the software used to automate operations in Cisco Unified Contact Center Express Unified CCX is related to the lack of protective measures taken for the web page structure. Exploiting this vulnerability allows a malicious actor to carry out X...

Websoft HCM Automation Software XSS

The vulnerability of Websoft HCM’s automation software for HR processes is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks by injecting specially crafted JavaScript code into HTML pages...

Juniper Networks Junos OS DHCP Daemon DoS

The vulnerability of the DHCP Daemon jdhcpd on Juniper Networks Junos OS stems from operations that go beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending specially crafted DHCP packets...

Employee Management System Code Execution

The vulnerability of the changepassword.php /admin/changepassword.php script of the Employee Management System is related to the failure to remove special elements during the processing of the currentpassword parameter. Exploiting this vulnerability allows an attacker operating remotely to execut...

Blink Rendering Module RCE

The vulnerability of the Blink module in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure...

DCMT Buffer Overflow DoS

The vulnerability of the library for working with the DICOM format in DCMT is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created DICOM file...

IBM InfoSphere Information Server Data Transmission Unauthorized Access

The vulnerability of the IBM InfoSphere Information Server software platform is related to the transfer of data in an open manner. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

MobileHMI IoTWorX Visualizer SCADA Unauthorized Access

The vulnerability of MobileHMI and IoTWorX Visualizer SCADA systems from GENESIS64 is related to incorrect restrictions on the path name to the restricted-access catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

SysAid Hardware XXE

The vulnerability of the com.ilient.agentApi.LshwAgentdoPost method in SysAid’s automation software for supporting and controlling hardware and software systems is related to incorrect restrictions on XML links to external objects during the processing of the /lshw endpoint. Exploiting this...

SQLite concat_ws SQLi DoS

The vulnerability of the SQL concatws function in the SQLite database management system is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure through the malloc parameter...

Totolink A3002R formDnsv6 Data Compromise

The vulnerability of the formDnsv6 function in the Totolink A3002R router’s microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and...

TOTOLINK N150RT XSS

The vulnerability of the Virtual Server Page component of TOTOLINK N150RT router microprogramming systems is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

DRI driver Heap Buffer Overflow DoS

The vulnerability of the resourcebuildbitdepthreductionparams function in the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Server MySQL DoS

Vulnerability of the MySQL Server component: The DDL system for database management of MySQL Server is vulnerable due to incorrect assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

Apache SeaTunnel Authentication Bypass

The vulnerability of the Apache SeaTunnel data processing platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

MySQL Server DoS

The vulnerability of the MySQL Server component of the database management system involves the improper assignment of permissions to a critical resource. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

TOTOLINK CA300-PoE Arbitrary Command Execution

The vulnerability of the setUploadUserData function in the TOTOLINK CA300-PoE router’s microprogramming software is related to the lack of measures taken at the control level during the processing of the FileName parameter. Exploiting this vulnerability allows an attacker operating remotely to...