Lucene search
+L
PtsecurityRecent

200219 matches found

Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•4 views

PT-2026-70325

Protection mechanism failure for some IntelR AI Reference Models before version v3.4.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This resul...

5.4CVSS5.2AI score0.00154EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•2 views

PT-2026-70114

An information disclosure vulnerability in Windmill Labs Windmill through 1.783.0 allows any authenticated workspace member to read legacy ownerless draft scripts that contain plaintext resource credentials. Drafts with a null owner email bypass ACL enforcement and are returned to any workspace...

6.5CVSS5.3AI score0.00305EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•4 views

PT-2026-70173

n8n versions before 2.32.1 fail to enforce the Allowed HTTP Request Domains allowlist in multiple AI and LLM nodes when user-supplied base or endpoint URLs are configured. Low-privileged workflow editors with use-only access to shared credentials can redirect requests to attacker-controlled hosts...

7.1CVSS5.3AI score0.00215EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•3 views

PT-2026-71890

CVE-2022-50974 - Rejected reason: This CVE ID has been rejected. CVE ID :CVE-2022-50974 Published : Aug. 11, 2026, 3:17 p.m. | 14 minutes ago Description :Rejected reason: This CVE ID has been rejected. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products,...

5.2AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•4 views

PT-2026-70046

Name of the Vulnerable Software and Affected Versions SAP Approuter affected versions not specified Description SAP Approuter fails to consistently handle specific error conditions. A low-privileged attacker could exploit this behavior under a non-default configuration. Successful exploitation is...

3.7CVSS5.1AI score0.00221EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•3 views

PT-2026-70395

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting issue, which allows an authorized attacker to perform spoofing over a network...

8CVSS4.8AI score0.0058EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•4 views

PT-2026-70472

Name of the Vulnerable Software and Affected Versions Windows GDI+ affected versions not specified Description The use of an uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally. Recommendations At the moment, there is no information about a newer...

5.5CVSS5.1AI score0.00387EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•2 views

PT-2026-70084

Name of the Vulnerable Software and Affected Versions openvt affected versions not specified Description The openvt -u functionality is designed to identify the owner of the current Virtual Terminal VT and execute login as that user from a privileged context. A flaw exists in the authenticate use...

7.8CVSS5.3AI score0.00106EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•3 views

PT-2026-70123

An information disclosure vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to retrieve any organisation tenant record via the gettenant Parse cloud function. The function accepts a contactId parameter and returns the full tenant record without...

7.5CVSS5.5AI score0.00454EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•3 views

PT-2026-70168

n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a type confusion vulnerability in the Send Email node, which does not enforce that its message fields are strings. A crafted non-string value supplied from a workflow expression into the text or HTML body field can be...

8.2CVSS5.5AI score0.00278EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•4 views

PT-2026-70624

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized attacker...

7.8CVSS6AI score0.00303EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•2 views

PT-2026-70783

Name of the Vulnerable Software and Affected Versions Windows Container Isolation FS Filter Driver unionfs.sys affected versions not specified Description Improper link resolution before file access, known as link following, occurs in the unionfs.sys driver. This allows an authorized attacker to...

5.5CVSS5.1AI score0.00357EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•2 views

PT-2026-70777

Name of the Vulnerable Software and Affected Versions Windows Management Services affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to cause a local denial of service. This occurs when the system...

5.5CVSS5.2AI score0.00425EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•2 views

PT-2026-70685

Name of the Vulnerable Software and Affected Versions Windows Message Queuing affected versions not specified Description A heap-based buffer overflow occurs in Windows Message Queuing, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory...

7.8CVSS5.6AI score0.0024EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•4 views

PT-2026-70827

XAgent contains a path traversal vulnerability in the workspace file endpoint that allows self-registered or default-credential users to read arbitrary files on the host by supplying parent-directory segments in the file name form field with no path containment check. Attackers can register an...

8.7CVSS5.5AI score0.00702EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•3 views

PT-2026-70687

Name of the Vulnerable Software and Affected Versions Windows SMB Client affected versions not specified Description A buffer over-read in the Windows SMB Client allows an unauthorized attacker to disclose sensitive information over a network, which can subsequently affect the system. A buffer...

6.5CVSS5.4AI score0.00651EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•4 views

PT-2026-70312

Out-of-bounds write for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...

6.9CVSS5.2AI score0.00219EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•2 views

PT-2026-70036

Name of the Vulnerable Software and Affected Versions SAP ABAP Platform affected versions not specified Description An unauthenticated user can send a specially crafted request to an internal component. This action may result in the disclosure of limited, non-sensitive data from previously used...

5.3CVSS5.2AI score0.00214EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•3 views

PT-2026-70316

Protection mechanism failure for some IntelR AI Containers before version v0.4.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may...

5.4CVSS5.2AI score0.00154EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•4 views

PT-2026-70801

Incomplete cleanup in some UEFI firmware for some IntelR reference platforms within UEFI may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when...

4CVSS5.1AI score0.0012EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•3 views

PT-2026-70863

Name of the Vulnerable Software and Affected Versions MongoDB Server affected versions not specified Description An issue in the query execution engine allows an authenticated user with read and write privileges to trigger a use-after-free condition when executing specific queries against...

7.1CVSS5.5AI score0.0027EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•4 views

PT-2026-70861

An issue in MongoDB Server's JavaScript scripting engine could allow an authenticated user with write privileges to cause code they control to be executed within the query scope of other users, through a specially crafted stored value processed during an internal maintenance cycle. This could...

6.4CVSS5.7AI score0.00284EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•4 views

PT-2026-70670

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A use-after-free condition in the Windows Win32K component allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when ...

7.8CVSS5.3AI score0.02446EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•4 views

PT-2026-70547

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description An untrusted pointer dereference in Windows Win32K allows an authorized attacker to locally disclose sensitive information, which may impact the system. Recommendations At the moment,...

5.5CVSS5AI score0.00312EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•3 views

PT-2026-70367

Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network...

6.5CVSS5.1AI score0.00769EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•5 views

PT-2026-70795

TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege guest member of a workspace to obtain a live Google Sheets OAuth access token for that workspace by calling the Google Sheets helper getAccessToken. The vulnerable path checks only whether the caller has read access...

7.6CVSS5.3AI score0.00315EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•5 views

PT-2026-70257

TypeBot is a chatbot builder tool. Prior to version 3.17.0, the Google Sheets OAuth callback decodes a base64-encoded JSON state parameter and trusts the embedded workspaceId, typebotId, blockId, and redirectUrl without cryptographic integrity protection or authorization checks. The callback rout...

7.1CVSS5.3AI score0.00251EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•3 views

PT-2026-70213

Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager versions prior to 2024 SU7 Description An out-of-bounds read in the Agent allows a remote unauthenticated attacker to crash an agent service. An out-of-bounds read occurs when a program reads data past the end of the...

7.5CVSS5.3AI score0.00775EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•4 views

PT-2026-70065

Name of the Vulnerable Software and Affected Versions Ray Enterprise Translation versions prior to 1.7.4 Description The Ray Enterprise Translation WordPress plugin fails to perform capability or nonce checks on an AJAX action. This allows any authenticated user, such as those with Subscriber...

6.5CVSS5.2AI score0.00174EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•6 views

PT-2026-70927

When the Mira Android app opens in-app WebView content e.g., shop redirect flows, the user's live session token is appended to the URL as a query string parameter, and a persistent user identifier is included in the WebView's User-Agent header. Both are then transmitted to third-party web...

6.9CVSS5.2AI score0.00225EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•3 views

PT-2026-70247

Vim is an open source, command line text editor. From 9.2.0511 until 9.2.0844, json decode item in src/json.c can retain a stale pointer after json decode string invokes channel fill to refill and free the current buffer, causing the error path to read freed memory instead of reader-js buf +...

3.3CVSS5.3AI score0.00109EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•4 views

PT-2026-70585

Name of the Vulnerable Software and Affected Versions Windows GDI+ affected versions not specified Description A heap-based buffer overflow occurs in Windows GDI+, which is a graphics API used for rendering images and shapes. This issue allows an authorized attacker to execute code locally or a...

7.8CVSS6AI score0.00269EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•3 views

PT-2026-70691

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the moment, there is no...

6.7CVSS5.2AI score0.00251EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•7 views

PT-2026-70143

Name of the Vulnerable Software and Affected Versions e107 version 2.4.0 Description An SQL injection allows unauthenticated remote attackers to execute arbitrary SQL commands. This occurs because the news item page ID parameter is concatenated directly into a SQL WHERE clause without proper...

9.8CVSS5.8AI score0.00338EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•4 views

PT-2026-70924

TypeBot is a chatbot builder tool. Versions prior to 3.17.0 expose a deprecated public upload endpoint at GET /api/v1/typebots/typebotId/blocks/blockId/storage/upload-url that accepts an attacker-controlled filePath and returns a presigned S3 PUT URL for that exact key. Because the endpoint only...

8.2CVSS5.4AI score0.00312EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•4 views

PT-2026-70055

Name of the Vulnerable Software and Affected Versions wildfly-core affected versions not specified Description A flaw allows a remote attacker with 'deployer' account authentication to import and deploy a malicious archive file from an untrusted source. By leveraging WildFly libraries to create a...

6.5CVSS5.5AI score0.00297EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•6 views

PT-2026-70928

The login endpoint on the Mira cloud API accepts any format-valid string in the password field and returns a live active session token for the account matching the supplied email address. An attacker could use an email address to control cloud accounts and access hormone record information and...

9.8CVSS5.3AI score0.00284EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•8 views

PT-2026-70749

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

5.5CVSS5AI score0.00277EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•4 views

PT-2026-70903

Malcolm is a network traffic analysis tool suite. The file-upload component FilePond PHP backend accepts uploads at POST /server/php/submit.php and stores them in a directory served by the same nginx and php-fpm instance. The allow-list that should restrict accepted file types is an empty array b...

8.8CVSS5.5AI score0.00298EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•4 views

PT-2026-70648

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting issue, which allows an authorized attacker to perform spoofing over a network...

5.4CVSS4.8AI score0.00412EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•4 views

PT-2026-70532

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A use-after-free condition in the Windows Kernel allows an authorized attacker to elevate privileges locally, enabling them to affect the system. Use-after-free is a memory corruption...

7CVSS5.4AI score0.00202EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•2 views

PT-2026-70352

is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access, potentially resulting in an application denial-of-service condition. The...

9.6CVSS5.7AI score0.00243EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•4 views

PT-2026-70332

Improper input validation for some vLLM Hardware Plugin for IntelR GaudiR software before version 0.16.0 within Ring 3: User Applications may allow a denial of service. Authorized adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result...

6.8CVSS5.2AI score0.00112EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•4 views

PT-2026-70460

Name of the Vulnerable Software and Affected Versions Windows MIDI Service Module affected versions not specified Description A race condition occurs in the Windows MIDI Service Module due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate...

7CVSS5.2AI score0.00189EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•3 views

PT-2026-70029

Name of the Vulnerable Software and Affected Versions SAP Approuter affected versions not specified Description The WebSocket component of SAP Approuter fails to perform sufficient authorization checks within certain functionality. This allows an attacker with low privileges to access restricted...

5.9CVSS5.1AI score0.00215EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•3 views

PT-2026-70880

Django REST framework is a toolkit for building Web APIs. Prior to 3.17.2, Django REST Framework's request.data parsing in rest framework/request.py Request. parse passes the underlying HttpRequest stream to JSONParser and FormParser for application/json and application/x-www-form-urlencoded...

5.3CVSS5.3AI score0.00321EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•3 views

PT-2026-70115

An insecure direct object reference vulnerability in PhotoPrism through commit bb0b933 allows any user with a valid preview token to retrieve the original-resolution cover photo of any album. The AlbumCover handler does not verify that the requesting user is authorized to access the specified alb...

4.3CVSS5.3AI score0.00206EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•4 views

PT-2026-70155

An SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with the acquisition = order receive permission to read arbitrary database contents via the orderby request parameter in acqui/parcels.pl. The parameter is passed to...

7.1CVSS5.7AI score0.00219EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•3 views

PT-2026-70423

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A buffer over-read in Windows NTFS allows an unauthorized attacker to disclose sensitive information through a physical attack. A buffer over-read occurs when a program reads more data...

4.6CVSS5.3AI score0.00449EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/08/11 12:0 a.m.•5 views

PT-2026-70561

Name of the Vulnerable Software and Affected Versions Windows GDI+ affected versions not specified Description An integer overflow or wraparound in Windows GDI+ allows an unauthorized remote attacker to execute arbitrary code and affect the system over a network. Recommendations At the moment,...

10CVSS8.5AI score0.0062EPSS
SaveExploits0References7
Total number of security vulnerabilities200219