Lucene search
+L
PtsecurityRecent

212496 matches found

Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•11 views

PT-2026-88627

Buffer overflow in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

9.8CVSS7.2AI score0.00506EPSS
SaveExploits11References236
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•14 views

PT-2026-88540

Out of bounds read in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

9.8CVSS7AI score0.00506EPSS
SaveExploits12References235
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•11 views

PT-2026-88677

Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...

9.8CVSS6.3AI score0.00506EPSS
SaveExploits13References235
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•17 views

PT-2026-89115

These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.23.4-1.1 package on the GA media of openSUSE Tumbleweed...

6.4AI score0.00608EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•14 views

PT-2026-88607

UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

9.8CVSS6.3AI score0.00506EPSS
SaveExploits12References235
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•16 views

PT-2026-88649

Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

9.8CVSS6.3AI score0.00506EPSS
SaveExploits12References235
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•13 views

PT-2026-88629

Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

9.8CVSS7AI score0.00506EPSS
SaveExploits12References235
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•12 views

PT-2026-88722

Missing authorization in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

9.8CVSS6.3AI score0.00506EPSS
SaveExploits12References235
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•14 views

PT-2026-88536

Incomplete cleanup in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Medium...

9.8CVSS6.3AI score0.00506EPSS
SaveExploits12References235
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•12 views

PT-2026-88668

Improper input validation in Chromium in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via crafted network traffic. Chromium security severity: Low...

9.8CVSS6.3AI score0.00506EPSS
SaveExploits12References235
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•18 views

PT-2026-88687

Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

9.8CVSS7.4AI score0.00506EPSS
SaveExploits12References235
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•15 views

PT-2026-88685

Double free in PDFium in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted PDF file. Chromium security severity: High...

9.8CVSS7.2AI score0.00506EPSS
SaveExploits12References235
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•34 views

PT-2026-88578

Observable discrepancy in Autofill in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

9.8CVSS6.3AI score0.00506EPSS
SaveExploits12References235
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•11 views

PT-2026-88749

UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

9.8CVSS6.3AI score0.00506EPSS
SaveExploits12References235
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•15 views

PT-2026-88736

Type confusion in XML in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

9.8CVSS7AI score0.00506EPSS
SaveExploits11References235
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•15 views

PT-2026-89113

These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.23.4-1.1 package on the GA media of openSUSE Tumbleweed...

6.4AI score0.00608EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•13 views

PT-2026-88696

Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

9.8CVSS6.4AI score0.00506EPSS
SaveExploits12References235
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•11 views

PT-2026-88642

Use after free in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

9.8CVSS7.4AI score0.00506EPSS
SaveExploits12References235
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•13 views

PT-2026-88558

UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

9.8CVSS6.3AI score0.00506EPSS
SaveExploits12References235
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•15 views

PT-2026-88734

Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...

9.8CVSS7.4AI score0.00506EPSS
SaveExploits12References235
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•16 views

PT-2026-87849

Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to deny service locally...

4.7CVSS5.7AI score0.00344EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•13 views

PT-2026-88114

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00333EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•12 views

PT-2026-87319

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...

8CVSS6AI score0.00768EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•16 views

PT-2026-88753

UI misrepresentation in FullScreen in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

9.8CVSS6.3AI score0.00506EPSS
SaveExploits12References235
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•16 views

PT-2026-88612

Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

9.8CVSS7.4AI score0.00506EPSS
SaveExploits12References235
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•15 views

PT-2026-87440

Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network...

5.7CVSS5.8AI score0.00646EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•15 views

PT-2026-86617

🚨 HIGH Severity: CVE-2026-86313 CVSS 7.8 Out-of-bounds write flaw in Samsung Opensource Walrus enables buffer overflow attacks. Local exploit, no privileges required. Affected: Walrus commit af80e665ea CVE Vulnerability PatchNow ThreatIntel DFIR https://t.co/6XjdaUNUYK...

7.8CVSS5.9AI score0.0017EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•13 views

PT-2026-86626

An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memory and crash the host process via a crafted class definition whose instance initialization entry count exceeds UINT16...

6.2CVSS6AI score0.00172EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•15 views

PT-2026-86595

A security vulnerability has been detected in FastAdmin up to 1.2.0.20210401 beta. Affected is the function register/login of the file application/index/controller/User.php of the component User Controller. Such manipulation of the argument url leads to cross site scripting. The attack may be...

5.3CVSS3.5AI score0.0047EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•17 views

PT-2026-86813

A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This issue affects some unknown processing of the file App/Common/Conf/config.php of the component Debug Mode. The manipulation of the argument DB DEBUG results in...

6.9CVSS5.5AI score0.00537EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•21 views

PT-2026-86774

PocketMine-MP versions before 4.2.9 fail to properly validate NBT data types during deserialization of inventory transaction packets from clients. Attackers can send crafted inventory transactions with malformed NBT tags to trigger server crashes and cause denial of service...

7.1CVSS5.6AI score0.00508EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•19 views

PT-2026-86829

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypa...

6.5CVSS5.9AI score0.00354EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•21 views

PT-2026-86917

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Verification of Data Authenticity vulnerability. An unauthenticated attacker with remote access could exploit this, leading to unauthorized access. This...

9.8CVSS5.7AI score0.00254EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•16 views

PT-2026-86875

In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source URL fetching...

3.3CVSS5.7AI score0.00145EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•34 views

PT-2026-86876

In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed host-level code execution...

7.8CVSS5.9AI score0.00185EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•19 views

PT-2026-86773

PocketMine-MP before 4.2.10 fails to validate the total length of incoming chat message blobs before splitting them by newline characters, allowing attackers to send large messages containing many newlines. Malicious clients can send megabyte-sized chat packets and bombard the server with thousan...

5.3CVSS5.7AI score0.00432EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•19 views

PT-2026-86804

The WP Fusion Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.47.13. This is due to insufficient authorization checks on the role parameter in the ThriveCart Auto Login handler's thrivecart function. This makes it possible for authenticated...

7.5CVSS5.8AI score0.00208EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•30 views

PT-2026-86836

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism...

7.3CVSS5.8AI score0.00194EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•20 views

PT-2026-86868

In JetBrains YouTrack before 2026.2.18769 missing access control on Helpdesk authorized reporters exposed reporter email addresses...

4.3CVSS5.7AI score0.00278EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•17 views

PT-2026-86871

In JetBrains YouTrack before 2026.1.14047 predefined search fields leaked all group names to any user, regardless of visibility permission...

4.3CVSS5.8AI score0.0027EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•17 views

PT-2026-86863

In JetBrains YouTrack before 2026.2.18634 stored XSS was possible via project and organization icon uploads...

3.5CVSS5.7AI score0.00242EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•17 views

PT-2026-86865

In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed read-only users to create and modify whiteboard cards...

6.5CVSS5.7AI score0.00299EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•14 views

PT-2026-86846

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

7.6CVSS5.8AI score0.00158EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•16 views

PT-2026-86853

In JetBrains YouTrack before 2026.2.18634 signed URL reuse allowed disclosure of restricted project icons...

4.3CVSS5.7AI score0.0027EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•19 views

PT-2026-86856

In JetBrains YouTrack before 2026.2.18634 angularJS template injection in assignee names led to stored XSS...

4.6CVSS5.7AI score0.00643EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•21 views

PT-2026-86852

🚨Critical - JetBrains Hub Unauth Trusted Service Registration PrivEsc CVE-2026-86480 JetBrains Hub exposes a critical trusted-service registration endpoint where the service trust flag can be set without authentication. An unauthenticated attacker can register a malicious trusted service, then...

9.8CVSS5.7AI score0.00498EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•19 views

PT-2026-86850

In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthenticated account takeover via a self-asserted email address...

9.8CVSS5.7AI score0.00606EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•19 views

PT-2026-86830

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/cust edit1.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the...

6.5CVSS6.4AI score0.00333EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•20 views

PT-2026-86672

HCL MyXalytics was affected by Potential DOS Vulnerability. It allows users to input data without any restriction on the number of characters which can impact system performance or availability...

3.5CVSS5.7AI score0.00163EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•18 views

PT-2026-86864

In JetBrains YouTrack before 2026.2.18634 a shared token cache allowed cross-tenant theft of GitHub App installation tokens...

8.5CVSS5.7AI score0.00899EPSS
SaveExploits0References2
Total number of security vulnerabilities212496