Lucene search
+L
PtsecurityRecent

212496 matches found

Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•14 views

PT-2026-87670

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...

7.5CVSS5.7AI score0.00211EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•12 views

PT-2026-88413

Adobe Experience Manager is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the...

5.4CVSS5.7AI score0.0039EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•12 views

PT-2026-88576

Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

9.8CVSS6.3AI score0.00506EPSS
SaveExploits12References235
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•23 views

PT-2026-88052

Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally...

8.6CVSS5.9AI score0.00442EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•13 views

PT-2026-88394

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...

5.4CVSS5.9AI score0.00359EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•9 views

PT-2026-87628

Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authorized attacker to disclose information locally...

5.5CVSS5.6AI score0.00404EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•12 views

PT-2026-88361

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...

5.4CVSS5.9AI score0.00359EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•12 views

PT-2026-88373

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...

5.4CVSS5.9AI score0.00359EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•12 views

PT-2026-88363

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...

5.4CVSS5.9AI score0.00359EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•16 views

PT-2026-87437

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

7.3CVSS5.7AI score0.00446EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•24 views

PT-2026-87215

Improper neutralization of special elements in output used by a downstream component 'injection' in SQL Server allows an unauthorized attacker to elevate privileges over a network...

9.6CVSS6AI score0.00882EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•19 views

PT-2026-87177

A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.6, FortiSOAR on-premise 7.5.0 through 7.5.3, FortiSOAR on-premise 7....

5.4CVSS5.7AI score0.0023EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•13 views

PT-2026-88616

Observable discrepancy in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

9.8CVSS6.1AI score0.00506EPSS
SaveExploits12References235
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•17 views

PT-2026-87641

Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...

8.8CVSS6.3AI score0.00819EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•15 views

PT-2026-87465

Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code over a network...

8.8CVSS6.3AI score0.00819EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•15 views

PT-2026-87191

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

7CVSS5.8AI score0.00202EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•34 views

PT-2026-88578

Observable discrepancy in Autofill in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

9.8CVSS6.3AI score0.00506EPSS
SaveExploits12References235
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•15 views

PT-2026-87938

Animate is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requir...

8.2CVSS6.8AI score0.00329EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•13 views

PT-2026-87460

Heap-based buffer overflow in Windows IKE Extension allows an authorized attacker to execute code over a network...

7.5CVSS6.3AI score0.00663EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•12 views

PT-2026-87839

Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack...

6.8CVSS6.3AI score0.00438EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•15 views

PT-2026-87432

Use of externally-controlled format string in Active Directory Certificate Services AD CS allows an authorized attacker to disclose information over a network...

6.5CVSS5.7AI score0.00994EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•10 views

PT-2026-87825

Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to elevate privileges locally...

7CVSS6.1AI score0.00264EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•15 views

PT-2026-88435

The Okta Access Gateway backup restore function does not validate the filename embedded in an encrypted backup payload. This results in writing file contents to unintended locations on the appliance filesystem...

4.9CVSS5.7AI score0.00458EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•13 views

PT-2026-87094

Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU processing operations to access already freed memory. This issue affects Valhall GPU Kernel Driver: from r50p0...

5.8AI score0.00162EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•13 views

PT-2026-87513

Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network...

9.8CVSS8.6AI score0.00974EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•14 views

PT-2026-87286

Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacker to disclose information locally...

4.7CVSS5.6AI score0.00311EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•15 views

PT-2026-86617

🚨 HIGH Severity: CVE-2026-86313 CVSS 7.8 Out-of-bounds write flaw in Samsung Opensource Walrus enables buffer overflow attacks. Local exploit, no privileges required. Affected: Walrus commit af80e665ea CVE Vulnerability PatchNow ThreatIntel DFIR https://t.co/6XjdaUNUYK...

7.8CVSS5.9AI score0.0017EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•13 views

PT-2026-86626

An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memory and crash the host process via a crafted class definition whose instance initialization entry count exceeds UINT16...

6.2CVSS6AI score0.00172EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•15 views

PT-2026-86595

A security vulnerability has been detected in FastAdmin up to 1.2.0.20210401 beta. Affected is the function register/login of the file application/index/controller/User.php of the component User Controller. Such manipulation of the argument url leads to cross site scripting. The attack may be...

5.3CVSS3.5AI score0.0047EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•20 views

PT-2026-86629

A vulnerability was determined in Beijing Meite Software Technology U+Smart Enjoyment WebSite 18.6001.1096.1000. This impacts an unknown function of the file /Report/Upload/UploadFormImg.ashx. Executing a manipulation of the argument File can lead to unrestricted upload. It is possible to launch...

7.5CVSS5.5AI score0.00513EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•17 views

PT-2026-86813

A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This issue affects some unknown processing of the file App/Common/Conf/config.php of the component Debug Mode. The manipulation of the argument DB DEBUG results in...

6.9CVSS5.5AI score0.00537EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•21 views

PT-2026-86774

PocketMine-MP versions before 4.2.9 fail to properly validate NBT data types during deserialization of inventory transaction packets from clients. Attackers can send crafted inventory transactions with malformed NBT tags to trigger server crashes and cause denial of service...

7.1CVSS5.6AI score0.00508EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•19 views

PT-2026-86829

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypa...

6.5CVSS5.9AI score0.00354EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•18 views

PT-2026-86827

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to informati...

5.5CVSS5.7AI score0.00143EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•17 views

PT-2026-86807

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Authentication vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass...

6.4CVSS5.8AI score0.00318EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•21 views

PT-2026-86917

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Verification of Data Authenticity vulnerability. An unauthenticated attacker with remote access could exploit this, leading to unauthorized access. This...

9.8CVSS5.7AI score0.00254EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•16 views

PT-2026-86875

In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source URL fetching...

3.3CVSS5.7AI score0.00145EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•34 views

PT-2026-86876

In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed host-level code execution...

7.8CVSS5.9AI score0.00185EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•19 views

PT-2026-86773

PocketMine-MP before 4.2.10 fails to validate the total length of incoming chat message blobs before splitting them by newline characters, allowing attackers to send large messages containing many newlines. Malicious clients can send megabyte-sized chat packets and bombard the server with thousan...

5.3CVSS5.7AI score0.00432EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•20 views

PT-2026-86805

A flaw was found in 389 Directory Server. The SELFDN ACI bind-rule evaluator incorrectly matches an anonymous LDAP client's empty bind DN against an empty stored attribute value, allowing an unauthenticated client to satisfy access control checks intended to require a matching authenticated...

7.5CVSS6AI score0.00847EPSS
SaveExploits1References46
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•19 views

PT-2026-86804

The WP Fusion Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.47.13. This is due to insufficient authorization checks on the role parameter in the ThriveCart Auto Login handler's thrivecart function. This makes it possible for authenticated...

7.5CVSS5.8AI score0.00208EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•30 views

PT-2026-86836

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism...

7.3CVSS5.8AI score0.00194EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•18 views

PT-2026-86914

Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that stream state never removes from the connection stream table. When a stream reaches the CLOSED state, stream state returns the concurrency slot and clears most of the stream's keys, but the entry itself...

7.5CVSS5.7AI score0.00365EPSS
SaveExploits0References15
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•20 views

PT-2026-86868

In JetBrains YouTrack before 2026.2.18769 missing access control on Helpdesk authorized reporters exposed reporter email addresses...

4.3CVSS5.7AI score0.00278EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•17 views

PT-2026-86871

In JetBrains YouTrack before 2026.1.14047 predefined search fields leaked all group names to any user, regardless of visibility permission...

4.3CVSS5.8AI score0.0027EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•17 views

PT-2026-86863

In JetBrains YouTrack before 2026.2.18634 stored XSS was possible via project and organization icon uploads...

3.5CVSS5.7AI score0.00242EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•17 views

PT-2026-86865

In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed read-only users to create and modify whiteboard cards...

6.5CVSS5.7AI score0.00299EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•14 views

PT-2026-86846

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

7.6CVSS5.8AI score0.00158EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•16 views

PT-2026-86853

In JetBrains YouTrack before 2026.2.18634 signed URL reuse allowed disclosure of restricted project icons...

4.3CVSS5.7AI score0.0027EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•19 views

PT-2026-86856

In JetBrains YouTrack before 2026.2.18634 angularJS template injection in assignee names led to stored XSS...

4.6CVSS5.7AI score0.00643EPSS
SaveExploits0References2
Total number of security vulnerabilities212496